Symptom:
New Palo Alto Firewalls will usually not ship with the latest OS.
Problem:
As of July 2010, the latest OS was 3.1.3, and it is critical that all newly deployed devices be upgraded to at least version 3.1.3, as this resolves several serious issues.
The upgrade procedure has several steps, and upgrading from 3.0.8 to 3.1.3 will take at least an hour, most of which is spent waiting for jobs and downloads to complete.
Solution:
UPGRADE PROCEDURE FOR PALO ALTO
——————————-
-Default management port info
username: admin
password: admin
-Register device to Nexum’s Eval Pool
-License the Palo Alto
Device Tab -> Retrieve the license key
Retrieve license key from server
-Perform a Dynamic Update
Device Tab -> Dynamic Updates -> Apps & Threats
Click Check Now -> Click Download (under action) -> Close when done
Click Install (under action) -> Close when done
**NOTE there may appear to be stalls during the install process, this is
a common occurrence. after the initial install a secondary content install
will occur… be patient. the process can take up to 30 minutes.**
-PANOS Update
**NOTE any device running a version of PANOS < 3.1.0 must be upgraded to version 3.1.0 before upgrading to a later release.**
Update to 3.1.0
Software Tab
Click Refresh -> Click Install 3.1.0 (under action) -> Click Reboot (when done)
Update to 3.1.3
Software Tab
Click Download 3.1.3 -> (once downloaded) -> Click Install 3.1.0 (under action) -> Click Reboot (when done)
-Perform a Followup Update
Device Tab -> Dynamic Updates -> Apps & Threats
Click Check Now
Device Tab -> Dynamic Updates -> Anti-virus
Click Check Now
Lastly, verify that the device is set to automatically download (and optionally install) updates.
Leave A Comment?
You must be logged in to post a comment.