Upgrade using PAN-OS CLI

1. Connect to your firewall server.
2. Check the available versions loaded on the firewall:

   admin@AI-Runtime-Security> request system software check
   
   Version                          Size    Released on          Downloaded
   ---------------------------------------------------------------------------
   11.2.4-h6.aingfw                 1192MB   2025/04/22 07:21:40  no       
   11.2.4-h5.aingfw                 1192MB   2025/04/22 07:18:01  yes     
   

   The above output shows that the 11.2.4-h6.aingfw is not downloaded.
3. Download a specific version of the firewall image:

   admin@ip-10-100-0-10> request system software download version 11.2.4-h6.aingfw
   Download job enqueued with jobid 15
   15
   

4. Check detailed download logs for a specific job ID from the above output:

   admin@ip-10-100-0-10> show jobs id 15
   Enqueued              Dequeued           ID                              Type                         Status Result Completed 
   ------------------------------------------------------------------------------------------------------------------------------
   2025/04/22 15:22:29   15:22:29           15                            Downld                            FIN     OK 15:24:14  
   Warnings:
   Details:Successfully downloaded
    Software version: 11.2.4-h6.aingfw 
   Preloading into software manager
   Successfully loaded into software manager
   

5. Recheck the available firewall versions loaded on the firewall:

   > request system software check
   Version                          Size    Released on          Downloaded
   ---------------------------------------------------------------------------
   11.2.4-h6.aingfw                 1192MB   2025/04/22 07:21:40  yes       
   11.2.4-h5.aingfw                 1192MB   2025/04/22 07:18:01  yes       
   

   The 11.2.4-h6.aingfw image is now downloaded.
6. Install the downloaded software (firewall image):

   admin@ip-10-100-0-10> request system software install version 11.2.4-h6.aingfw
   
   
   Executing this command will install a new version of software. It will not take effect until system is restarted. Warning: PAN-OS install should be performed in a maintenance window to avoid any disruption in traffic. If the system is part of an HA configuration, put it in suspended state before starting the installation. Do you want to continue? (y or n) 
   Software install job enqueued with jobid 16. Run 'show jobs id 16' to monitor its status. Please reboot the device after the installation is done.
   16
   

7. View the detailed logs for the above job ID:

   admin@ip-10-100-0-10> show jobs id 16
   Enqueued              Dequeued           ID                              Type                         Status Result Completed 
   ------------------------------------------------------------------------------------------------------------------------------
   2025/04/22 15:27:45   15:27:45           16                         SWInstall                            FIN     OK 15:29:37  
   Warnings:
   Details:
   Software installation of version 11.2.4-h6.aingfw successfully completed. Please reboot to switch to the new version.

8. Check the current software version:

   admin@ip-10-100-0-10> show system info | match sw-version
   sw-version: 11.2.5-h1.aingfw
   

9. Restart the firewall:

   admin@ip-10-100-0-10> request restart system 
   
   
   Executing this command will disconnect the current session. Do you want to continue? (y or n) Please type "y" for yes or "n" for no.
   Broadcast message from root (pts/1) (Tue Apr 22 15:31:09 2025):
   The system is going down for reboot NOW!
   Connection to 54.198.183.141 closed.

10. Ensure the current software version is now upgraded:

    admin@ip-10-100-0-10> show system info | match sw-version
    sw-version: 11.2.4-h6.aingfw