Strata Copilot
    PAN-OS Upgrade Guide
    : Generate an Upgrade Check Report on a Standalone Device
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. PAN-OS Upgrade Guide
    4. Upgrade PAN-OS
    5. Generate an Upgrade Check Report on a Standalone Device
    Download PDF

    PAN-OS Upgrade Guide

    Generate an Upgrade Check Report on a Standalone Device

    Table of Contents

    Generate an Upgrade Check Report on a Standalone Device

    Generate an upgrade check report on a standalone device during the install workflow or manually, compare reports, and remediate issues.
    Where Can I Use This?What Do I Need?
    • Panorama
    • Standalone firewalls
    • PAN-OS 12.1.2 or later
    Use this feature to generate Upgrade Check reports to assess upgrade readiness, remediate potential issues, and view the post-upgrade state of your device.
    On the firewall, select Device > Software to generate an upgrade check report for the firewall during the install process or Device > Upgrade Check to generate an upgrade report manually.
    On Panorama, select Panorama > Software to generate an upgrade check report for the Panorama appliance during the install process or Device > Upgrade Check to generate an upgrade report manually.

    Generate an Upgrade Check Report During an Upgrade

    Generate an upgrade check report during the upgrade process.
    • PanoramaSoftware
    • DeviceSoftware
    1. Navigate to PanoramaSoftware.
    2. Install the software image.
    3. Click Generate Report.
    4. Add a Report Description and click Generate Report.
      Describe whether the report is being generated before an upgrade or after an upgrade, and any remediation that has been made.
    5. If a check status is Warning or Critical_ALERT, remediate the issue.
    6. If no remediation is needed, click Start Install.
    7. After the install is completed, navigate to Panorama > Upgrade Check, generate a post-install report, and add a description.
    8. Select the pre-install and post-install reports and click Compare Reports.
    9. (Optional) Download PDF/CSV to retain a copy of the report.

    Generate an Upgrade Check Report Manually

    Generate an upgrade check report outside of the upgrade process.
    • PanoramaUpgrade Check
    • DeviceUpgrade Check
    1. Navigate to PanoramaUpgrade Check.
    2. Add a Report Description and click Generate Report
      Note any remediation that been made or the reason for generating the report.
    3. (Optional) Select two reports and click Compare Reports.
    4. (Optional) Download PDF/CSV to retain a copy of the report.

    Remediate Warnings and Alerts

    How to fix the issues displayed in an upgrade check report.
    1. Click a report name to open the report.
    2. Click Summary > Checks Flagged.
      Name: The check that was made.
      Description: The action needed to remediated the issue or an explanation of the check.
      Status: A critical alert that must be remediated for a successful upgrade, or a warning alert to consider making changes before upgrading.
      Details: Specifics of an issue. For example, if a Certificate Expiry Check is flagged, the expired certificates are displayed.
      Remediation/Best Practice: What is needed to resolve the issue, which may include a specific remediation link.
    3. Use remediation links or directions to resolve the issue.
    4. Generate a report.
    5. Select the pre-remediation and the post-remediation report and Compare Upgrade Reports to review the check status.

    © 2026 Palo Alto Networks, Inc. All rights reserved.