After you receive a new Palo Alto Networks firewall and a USB flash drive loaded with bootstrap files, you can bootstrap the firewall.
Microsoft Windows and Apple Mac operating systems are unable to read the bootstrap USB flash drive because the drive is formatted using an ext4 file system. You must install third-party software or use a Linux system to read the USB drive.
Bootstrap a Firewall Using a USB Flash Drive
The firewall must be in a factory default state or must have all private data deleted.
To ensure connectivity with your corporate headquarters, cable the firewall by connecting the management interface (MGT) using an Ethernet cable to one of the following: An upstream modem A port on the switch or router An Ethernet jack in the wall
Insert the USB flash drive into the USB port on the firewall and power on the firewall. The factory default firewall bootstraps itself from the USB flash drive. The firewall Status light turns from yellow to green when the firewall is configured; autocommit is successful.
Verify bootstrap completion. You can see basic status logs on the console during the bootstrap and you can verify that the process is complete. If you included Panorama values (panorama-server, tplname, and dgname) in your init-cfg.txt file, check Panorama managed devices, device group, and template name. Verify the general system settings and configuration by accessing the web interface and selecting Dashboard > Widgets > System or by using the CLI operational commands show system info and show config running . Verify the license installation by selecting Device > Licenses or by using the CLI operational command request license info . If you have Panorama configured, manage the content versions and software versions from Panorama. If you do not have Panorama configured, use the web interface to manage content versions and software versions.

Related Documentation