How to retrieve a history of all software upgrades and downgrades
12246
Created On 11/07/19 04:24 AM - Last Modified 08/18/21 02:52 AM
Objective
How to retrieve a history of all software upgrades and downgrades?
Environment
- PAN-OS 7.1 and above
- Any Palo Alto Firewall.
- Any Panorama.
Procedure
debug swm history command provides the history of all upgrade and downgrade on a Palo Alto device.
Example from a VM-100:
PA-VM> debug swm history
Command Status Date
--------------------------------------------------------------------------------
load http://10.0.0.226/pub/repository/panos/images/re Success 07/10/13 13:44:01
bootstrap maint maint panos-5.0.0 Success 07/10/13 13:44:06
bootstrap pancfg content panos-5.0.0 Success 07/10/13 13:44:10
bootstrap sysroot0 panos panos-5.0.0 Success 07/10/13 13:44:45
boot sysroot0 Success 07/10/13 13:44:55
load http://10.0.0.226/pub/repository/panos/images/re Failure 07/10/13 13:48:40
>>> Decryption failed: GnuPG exited non-zero, with code 131072
load http://10.0.0.226/pub/repository/panos/images/re Success 07/10/13 13:49:16
upgrade releng 5.0.6 Failure 07/10/13 13:53:10
>>> Failed: HTTP Error 404: Not Found
install releng 5.0.6 Failure 07/10/13 13:55:05
>>> Image releng is not present in repository
install panos 5.0.6 Failure 07/10/13 13:55:18
>>> Image panos is not present in repository
load http://10.0.0.226/pub/repository/panos/images/re Failure 07/10/13 14:05:54
>>> Failed: HTTP Error 404: Not Found
load http://10.0.0.226/pub/repository/panos/images/re Success 07/10/13 14:06:37
bootstrap maint maint panos-5.0.6 Success 07/10/13 14:06:41
bootstrap pancfg content panos-5.0.6 Success 07/10/13 14:06:45
bootstrap sysroot0 panos panos-5.0.6 Success 07/10/13 14:07:21
boot sysroot0 Success 07/10/13 14:07:30
firstboot Success 04/14/16 17:45:25
firstboot Success 12/14/16 17:05:04
firstboot Success 12/14/16 17:16:19
load /opt/pancfg/mgmt/sw-images/PanOS_vm-6.0.0 Success 12/14/16 17:39:21
install panos-6.0.0 Failure 12/14/16 17:40:50
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0 Failure 12/14/16 17:41:04
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0 Failure 12/14/16 17:41:12
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0 Failure 12/14/16 17:41:29
>>> Upgrading from 5.0.6 to 6.0.0 requires a content version of 401 or greater a
nd found 320-1459.
install panos-6.0.0 Failure 12/14/16 17:41:49
[..]
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.0.0 Success 10/15/19 05:51:28
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.0.19-h1 Success 10/15/19 05:54:21
install panos-8.0.19-h1 Success 10/15/19 05:58:06
firstboot Success 10/15/19 06:02:09
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.1.10 Failure 10/25/19 16:14:35
>>> Image File Authentication Error
load /opt/pancfg/mgmt/sw-images/PanOS_vm-8.1.10 Success 10/25/19 16:15:55
install panos-8.1.10 Success 10/25/19 16:24:48
firstboot Success 10/25/19 16:31:03
install --category hsm --rpm lunasa-5.4 Failure 10/25/19 16:31:16
>>> Package Install Error
Note: Even with a factory reset, this command can still get a history of the software first installed and subsequent upgrades and downgrades.