Palo Alto Networks Knowledgebase: Is it possible to upgrade PAN-OS without a license?

Is it possible to upgrade PAN-OS without a license?

11506
Created On 02/07/19 23:37 PM - Last Updated 02/07/19 23:37 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Yes, PAN-OS versions can be upgraded without a support license if it's done manually.

 

In order to download PAN-OS software images directly from the update server, the Palo Alto Networks firewall needs to have a support license activated on the support portal (it is not required to have the license installed on the firewall for PAN-OS image installs) and have internet access to download the software packages. 

 

However, in certain environments customers's devices will not have access to the internet, but would still need to perform software upgrades.

In such cases, PAN-OS updates can be downloaded from the support portal and brought into the OutOfBand network to be installed manually

 

It is recommended to first manually upload and install the latest content version (App) and then manually upload and install the desired PAN-OS version.

 

 

Note: PAN-OS software must be downloaded from the Palo Alto Networks Support Portal (Software Updates) and then manually uploaded and installed on the firewall.

 

caveat: VM series firewalls cannot be upgraded in this way as they need to be activated before use and activation requires a support license.

 

Other helpful articles:

How to Upgrade PAN-OS on a Palo Alto Networks Device

How to Manually Install Antivirus, Content, and WildFire Updates on the Firewall



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm62CAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language