Bootstrap a Firewall Using a USB Flash Drive
After you receive a new Palo Alto Networks firewall and a USB flash drive loaded with bootstrap files, you can bootstrap the firewall.
Microsoft Windows and Apple Mac operating systems are unable to read the bootstrap USB flash drive because the drive is formatted using an ext4 file system. You must install third-party software or use a Linux system to read the USB drive.
- The firewall must be in a factory default state or must have all private data deleted.
- To ensure connectivity with your corporate headquarters,
cable the firewall by connecting the management interface (MGT)
using an Ethernet cable to one of the following:
- An upstream modem
- A port on the switch or router
- An Ethernet jack in the wall
- Insert the USB flash drive into the USB port on the firewall
and power on the firewall. The factory default firewall bootstraps
itself from the USB flash drive.The firewall Status light turns from yellow to green when the firewall is configured; autocommit is successful.
- Verify bootstrap completion. You can see basic status
logs on the console during the bootstrap and you can verify that
the process is complete.
- If you included Panorama values (panorama-server, tplname, and dgname) in your init-cfg.txt file, check Panorama managed devices, device group, and template name.
- Verify the general system settings and configuration by accessing the web interface and selecting DashboardWidgetsSystem or by using the CLI operational commands show system info and show config running.
- Verify the license installation by selecting DeviceLicenses or by using the CLI operational command request license info.
- If you have Panorama configured, manage the content versions and software versions from Panorama. If you do not have Panorama configured, use the web interface to manage content versions and software versions.
Bootstrap the Firewall
Bootstrap the Firewall Bootstrapping speeds up the process of configuring and licensing the firewall to make it operational on the network with or without Internet ...
Prepare a USB Flash Drive for Bootstrapping a Firewall
Prepare a USB Flash Drive for Bootstrapping a Firewall You can use a USB flash drive to bootstrap a physical firewall. However, to do so ...
VM-Series Firewall Bootstrap Workflow
VM-Series Firewall Bootstrap Workflow After you familiarize yourself with the Bootstrap Package and assess whether you will want to fully configure the firewall or use ...
USB Flash Drive Support
USB Flash Drive Support The USB flash drive that bootstraps a hardware-based Palo Alto Networks firewall must support one of the following: File Allocation Table ...
Bootstrap Errors If you receive an error message during the bootstrapping process, refer to the following table for details. Error message (Severity) Reasons Boot image ...
Verify Bootstrap Completion
Verify Bootstrap Completion You can see basic status logs on the console during the bootstrap and you can verify that the process is complete. If ...
Access the Maintenance Recovery Tool (MRT)
Access the Maintenance Recovery Tool (MRT) The Maintenance Recovery Tool (MRT) enables you to perform several tasks on Palo Alto Networks firewalls and appliances. For ...
Reset the Firewall to Factory Default Settings
Reset the Firewall to Factory Default Settings Resetting the firewall to factory defaults will result in the loss of all configuration settings and logs. Set ...
Upgrade Drives on M-Series Appliances Running Panorama 7.0....
Upgrade Drives on M-Series Appliances Running Panorama 7.0.8 or a Later Release Access the command line interface (CLI) on the M-Series appliance. Connect to the ...