Maintenance releases are small upgrades of the base image and deal with bug fixes and sometimes introduce small enhancements.Īs a rule of thumb, firewalls should be running the Palo Alto preferred PAN-OS release, and it is generally a good practice to install these releases as they are published. Like most vendors, Palo Alto Networks produce a base image and maintenance releases. This ensures the device’s configuration is migrated to the PAN-OS's newer supported features and that nothing “breaks” during the upgrade process. When upgrading from a fairly old to a newer PAN-OS version, multi-step upgrades might be necessary. Understanding PAN-OS Upgrade Pathsĭirect (one-step) upgrade to the latest PAN-OS depends on the current version your firewall is running. Our article How to Register and Activate Palo Alto Support, Subscription Servers, and Licenses covers this process in great detail. It is important to note that only eligible Palo Alto customers, that is, those with an active contract, can receive updates for their firewalls.

Why Aren’t the Latest PAN-OS Releases Available for Download?.

Dealing with Common Install Errors: Upgrading Requires Greater Content Version.

Downloading & Installing PAN-OS Software.

Backing Up & Exporting Firewall Configuration.

When upgrading PAN-OS for both Panorama and Firewall appliances, always upgrade Panorama first. While the same process described below can be used to upgrade Panorama PAN-OS, it is important to ensure the Panorama PAN-OS version is equal or greater than the firewalls.

Finally, we will explain why newer PAN-OS releases might not be visible for download in your firewall’s software section.

We’ll also explain the PAN-OS upgrade paths, show how to backup and export your configuration, deal with common PAN-OS install errors ( upgrading requires greater content version). This article will show you how to upgrade your standalone Firewall PAN-OS, explain the differences between a Base Image and a Maintenance Release Image. Upgrading your Palo Alto Firewall or Panorama Management System to the preferred PAN-OS release is always recommended as it ensures it remains stable, safe from known vulnerabilities and exploits but also allows you to take advantage of new features.

Palo alto vm download