Is it possible to upgrade PAN-OS without a license?

Is it possible to upgrade PAN-OS without a license?

Created On 09/26/18 21:06 PM - Last Modified 09/03/20 00:07 AM

Attempting to upgrade PAN-OS without a license on the firewall.

  • Any PAN-OS 
  • Any PAN Firewall


Yes, PAN-OS versions can be upgraded without a support license if it's done manually.


In order to download PAN-OS software images directly from the update server, the Palo Alto Networks firewall needs to have a support license activated on the support portal (it is not required to have the license installed on the firewall for PAN-OS image installs) and have internet access to download the software packages. 


However, in certain environments customers's devices will not have access to the internet, but would still need to perform software upgrades.

In such cases, PAN-OS updates can be downloaded from the support portal and brought into the OutOfBand network to be installed manually


It is recommended to first manually upload and install the latest content version (App) and then manually upload and install the desired PAN-OS version.


Note: PAN-OS software must be downloaded from the Palo Alto Networks Support Portal (Software Updates) and then manually uploaded and installed on the firewall.


caveat: VM series firewalls cannot be upgraded in this way as they need to be activated before use and activation requires a support license.


Additional Information

Other helpful articles:

How to Manually Install Antivirus, Content, and WildFire Updates on the Firewall

  • Print
  • Copy Link

Choose Language