Software updates PA-3220

[Daniel12345]

Good day,

I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulate them via the CLI, our appliances are not connected to internet. Every time I try to upload or install it says software already installed. but not showing anything on the web interface.

Any idea. 

[Claw4609]

Hello,

I would try installing a different version via the cli and see if that version appears. Could also try restarting the web-server and see if that fixes the issue: debug software restart process web-server 

You can check currently installed and download/install content updates and Pan-os versions via the CLI. Heres the document for the various commands Use CLI Commands for Upgrade Tasks (paloaltonetworks.com)

[reaper]

try these two commands to populate both the software and content page:

> request system software check

> request content upgrade check

also: to revert to the previously installed OS, use these commande:

> debug swm status     (to ensure your previous version is the one you want to go back to)

Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 10.2.4-h2
sysroot1 RUNNING-ACTIVE 10.2.7-h3
maint READY 10.2.7-h3

> debug swm revert

> request restart system

this operation rolls back to the previous sysroot partition (so no software installs required, you change the boot partition to the previous one)

[Daniel12345]

Good day,

So these command listed above works if you are connected to internet and have access to palo alto server. Which in our configuration is not possible. So let say for example I have version A,B,C downloaded and version C is the running version. For any reason I need to factory reset to Version B, version A and C will disapeared from the web-gui software interface and only B will now remain. If I want to repopulate the web-gui with all the version already downloaded on the firewall I didn't see any command allowing it. If I try to download the software version from a media it tell me that the file already exist (which make sense since the factory reset doesn't delete them). If I am correct to repopulate the web-gui interface with version A,B,C, I would have to manually delete A,B software pkg on the firewall, and upload them again. There must be a better way. Same goes for the contents/virus threath I presume.