End-of-Life (EoL)

Bootstrap a Firewall Using a USB Flash Drive

After you receive a new Palo Alto Networks firewall and a USB flash drive loaded with bootstrap files, you can bootstrap the firewall.
Microsoft Windows and Apple Mac operating systems are unable to read the bootstrap USB flash drive because the drive is formatted using an ext4 file system. You must install third-party software or use a Linux system to read the USB drive.
  1. The firewall must be in a factory default state or must have all private data deleted.
  2. To ensure connectivity with your corporate headquarters, cable the firewall by connecting the management interface (MGT) using an Ethernet cable to one of the following:
    • An upstream modem
    • A port on the switch or router
    • An Ethernet jack in the wall
  3. Insert the USB flash drive into the USB port on the firewall and power on the firewall. The factory default firewall bootstraps itself from the USB flash drive.
    The firewall Status light turns from yellow to green when the firewall is configured; autocommit is successful.
  4. Verify bootstrap completion. You can see basic status logs on the console during the bootstrap and you can verify that the process is complete.
    1. If you included Panorama values (panorama-server, tplname, and dgname) in your init-cfg.txt file, check Panorama managed devices, device group, and template name.
    2. Verify the general system settings and configuration by accessing the web interface and selecting
      or by using the CLI operational commands
      show system info
      show config running
    3. Verify the license installation by selecting
      or by using the CLI operational command
      request license info
    4. If you have Panorama configured, manage the content versions and software versions from Panorama. If you do not have Panorama configured, use the web interface to manage content versions and software versions.

Recommended For You