Upgrade the PAN-OS Software Version (Standalone Version)
Now that the VM-Series firewall has network connectivity and the base PAN-OS software is installed, consider upgrading to the latest version of PAN-OS. Use the following instructions for firewalls that are not deployed in a high availability (HA) configuration. For firewalls deployed in HA, refer to the PAN-OS 8.0 New Features Guide.To minimize downtime for your users, perform upgrades during non-business hours.
- Verify that enough hardware resources are available to the VM-Series firewall. Refer to the VM-Series System Requirements to see the new resource requirements for each VM-Series model. Allocate additional hardware resources before continuing the upgrade process. The process for assigning additional hardware resources differs on each hypervisor.
- From the web interface, navigate to DeviceLicenses and make sure you
have the correct VM-Series firewall license and that the license
is activated.On the VM-Series firewall standalone version, navigate to DeviceSupport and make sure that you have activated the support license.
- (Required for a firewall that is in production) Save
a backup of the current configuration file.
- Select DeviceSetupOperations and click Export named configuration snapshot.
- Select the XML file that contains your running configuration (for example, running-config.xml) and click OK to export the configuration file.
- Save the exported file to a location external to the firewall. You can use this backup to restore the configuration if you have problems with the upgrade.
- Check the Release Notes to verify the Content Release
version required for the PAN-OS version. The firewalls you plan
to upgrade must be running the Content Release version required
for the PAN-OS version.
- Select DeviceDynamic Updates.
- Check the Applications and Threats or Applications section to determine what update is currently running.
- If the firewall is not running the required update or later, click Check Now to retrieve a list of available updates.
- Locate the desired update and click Download.
- After the download completes, click Install.
- Upgrade the PAN-OS version on the VM-Series firewall.
- Select DeviceSoftware.
- Click Refresh to view the latest software release and also review the Release Notes to view a description of the changes in a release and to view the migration path to install the software.
- Click Download to retrieve the software then click Install.
- If you are upgrading from PAN-OS 7.1 to PAN-OS 8.0, transition
your VM-Series firewall from a 40GB hard disk to a 60GB hard disk.
- On your hypervisor, attach a new 60GB hard drive to the VM-Series firewall. This new disk must be 60GB. The firewall will return an error if another value is assigned.
- Access the firewall CLI.
- Use the following CLI command to create a new disk
partition to copy the data from the original system disk to the
new system disk.
> request system clone-system-disk target sdb
- Return to your hypervisor and power off the VM-Series firewall.
- Remove the original system disk.
- Power on the VM-Series firewall.
Upgrade the VM-Series Firewall
Upgrade the VM-Series Firewall Upgrade the PAN-OS Software Version (Standalone Version) Upgrade the PAN-OS Software Version (VM-Series for NSX) Upgrade the VM-Series Model Upgrade the ...
Upgrade the VM-Series for NSX Without Disrupting Traffic
Upgrade the VM-Series for NSX Without Disrupting Traffic Use the following procedure to upgrade the PAN-OS version of the VM-Series firewalls in your VMware NSX ...
Provision the VM-Series Firewall on an ESXi Server
Provision the VM-Series Firewall on an ESXi Server Use these instruction to deploy the VM-Series firewall on a (standalone) ESXi server. For deploying the VM-Series ...
Upgrade the PAN-OS Software Version (VM-Series for NSX)
Upgrade the PAN-OS Software Version (VM-Series for NSX) Choose the upgrade method that best suits your deployment. Upgrade the VM-Series for NSX During a Maintenance ...
Upgrade the VM-Series for NSX During a Maintenance Window
Upgrade the VM-Series for NSX During a Maintenance Window For the VM-Series Firewall NSX edition, use Panorama to upgrade the software version on the firewalls. ...
Determine the Upgrade Path to PAN-OS 8.0
Determine the Upgrade Path to PAN-OS 8.0 When you upgrade from one PAN-OS feature release version to a later feature release, you cannot skip the ...
Deploy the Palo Alto Networks NGFW Service
Deploy the Palo Alto Networks NGFW Service Use the following steps to automate the process of deploying an instance of the VM-Series firewall for NSX ...
Deploy the VM-Series Firewall on AWS
Deploy the VM-Series Firewall on AWS Obtain the AMI Planning Worksheet for the VM-Series in the AWS VPC Launch the VM-Series Firewall on AWS Use ...
Upgrade a Firewall to PAN-OS 8.0
Upgrade a Standalone Firewall to PAN-OS 8.0 Review the PAN-OS 8.0 Release Notes and then use the following procedure to upgrade a firewall not in ...