How to retrieve a history of all software upgrades and downgrades

How to retrieve a history of all software upgrades and downgrades

1996
Created On 11/07/19 04:24 AM - Last Modified 08/18/21 02:52 AM


Objective
How to retrieve a history of all software upgrades and downgrades?

Environment
  • PAN-OS 7.1 and above
  • Any Palo Alto Firewall.
  • Any Panorama.


Procedure
debug swm history command provides the history of all upgrade and downgrade on a Palo Alto device.

Example from a VM-100:
PA-VM> debug swm history 
Command                                               Status   Date
--------------------------------------------------------------------------------
load http://10.0.0.226/pub/repository/panos/images/re Success  07/10/13 13:44:01
bootstrap maint maint panos-5.0.0                     Success  07/10/13 13:44:06
bootstrap pancfg content panos-5.0.0                  Success  07/10/13 13:44:10
bootstrap sysroot0 panos panos-5.0.0                  Success  07/10/13 13:44:45
boot sysroot0                                         Success  07/10/13 13:44:55
load http://10.0.0.226/pub/repository/panos/images/re Failure  07/10/13 13:48:40
>>> Decryption failed: GnuPG exited non-zero, with code 131072
load http://10.0.0.226/pub/repository/panos/images/re Success  07/10/13 13:49:16
upgrade releng 5.0.6                                  Failure  07/10/13 13:53:10
>>> Failed: HTTP Error 404: Not Found
install releng 5.0.6                                  Failure  07/10/13 13:55:05
>>> Image releng is not present in repository
install panos 5.0.6                                   Failure  07/10/13 13:55:18
>>> Image panos is not present in repository
load http://10.0.0.226/pub/repository/panos/images/re Failure  07/10/13 14:05:54
>>> Failed: HTTP Error 404: Not Found
load http://10.0.0.226/pub/repository/panos/images/re Success  07/10/13 14:06:37
bootstrap maint maint panos-5.0.6                     Success  07/10/13 14:06:41
bootstrap pancfg content panos-5.0.6                  Success  07/10/13 14:06:45
bootstrap sysroot0 panos panos-5.0.6                  Success  07/10/13 14:07:21
boot sysroot0                                         Success  07/10/13 14:07:30
firstboot                                             Success  04/14/16 17:45:25
firstboot                                             Success  12/14/16 17:05:04
firstboot                                             Success  12/14/16 17:16:19
load /opt/pancfg/mgmt/sw-images/PanOS_vm-6.0.0        Success  12/14/16 17:39:21
install panos-6.0.0                                   Failure  12/14/16 17:40:50
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0                                   Failure  12/14/16 17:41:04
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0                                   Failure  12/14/16 17:41:12
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0                                   Failure  12/14/16 17:41:29
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0                                   Failure  12/14/16 17:41:49
[..]
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.0.0        Success  10/15/19 05:51:28
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.0.19-h1    Success  10/15/19 05:54:21
install panos-8.0.19-h1                               Success  10/15/19 05:58:06
firstboot                                             Success  10/15/19 06:02:09
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.1.10       Failure  10/25/19 16:14:35
>>> Image File Authentication Error
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.1.10       Success  10/25/19 16:15:55
install panos-8.1.10                                  Success  10/25/19 16:24:48
firstboot                                             Success  10/25/19 16:31:03
install --category hsm --rpm lunasa-5.4               Failure  10/25/19 16:31:16
>>> Package Install Error

Note: Even with a factory reset, this command can still get a history of the software first installed and subsequent upgrades and downgrades.
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNNVCA4&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments