Now that the VM-Series firewall has network connectivity and the base PAN-OS software is installed, consider upgrading to the latest version of PAN-OS. Use the following instructions for firewalls that are not deployed in a high availability (HA) configuration. For firewalls deployed in HA, refer to the PAN-OS 7.1 New Features Guide.
Upgrade PAN-OS Version (Standalone Version)
From the web interface, navigate to Device > Licenses and make sure you have the correct VM-Series firewall license and that the license is activated. On the VM-Series firewall standalone version, navigate to Device > Support and make sure that you have activated the support license.
(Required for a firewall that is in production) Save a backup of the current configuration file. Select Device > Setup > Operations and click Export named configuration snapshot. Select the XML file that contains your running configuration (for example, running-config.xml) and click OK to export the configuration file. Save the exported file to a location external to the firewall. You can use this backup to restore the configuration if you have problems with the upgrade.
Check the Release Notes to verify the Content Release version required for the PAN-OS version. The firewalls you plan to upgrade must be running the Content Release version required for the PAN-OS version. Select Device > Dynamic Updates. Check the Applications and Threats or Applications section to determine what update is currently running. If the firewall is not running the required update or later, click Check Now to retrieve a list of available updates. Locate the desired update and click Download. After the download completes, click Install.
Upgrade the PAN-OS version on the VM-Series firewall. Select Device > Software. Click Refresh to view the latest software release and also review the Release Notes to view a description of the changes in a release and to view the migration path to install the software. Click Download to retrieve the software then click Install.

Related Documentation