VM-Series
Deployment
Guide
7
Upgrade the PAN-OS Software Version
Now that the VM-Series firewall has network connectivity and the base PAN-OS software is installed, you need
to upgrade to the latest version of PAN-OS (a support license is required).
Upgrade the VM-Series Model
The licensing process for the VM-Series firewall uses the UUID and the CPU ID to generate a unique serial
number for each VM-Series firewall. Hence, when you generate a license, the license is mapped to a specific
instance of the VM-Series firewall and cannot be modified.
In order to apply a new capacity license to a firewall that has been previously licensed, you need to clone the
existing (fully configured) VM-Series firewall and apply a new license to the cloned instance of the firewall.
Use the instructions in this section, if you are:
Migrating from an evaluation license to a production license.
Upgrading the model to allow for increased capacity. For example you want to upgrade from the VM-200 to
the VM-1000-HV license.
Upgrade PAN-OS Version
1.
From the web interface, navigate to
Device > Licenses
and make sure you have the correct VM-Series firewall license
and that the license is activated.
2.
To upgrade the VM-Series firewall PAN-OS software, select
Device > Software
.
3.
Click
Refresh
to view the latest software release and also review the
Release Notes
to view a description of the
changes in a release and to view the migration path to install the software.
4.
Click
Download
to retrieve the software then click
Install
.
Migrate the License on the VM-Series Firewall
Step 1
Power off the VM-Series firewall.
Step 2
Clone the VM-Series firewall.
If you are manually cloning, when prompted indicate that you are
copying and not moving the firewall.
Step 3
Power on the new instance of the
VM-Series firewall.
1.
Launch the serial console of the firewall on the vSphere/SDX
web interface and enter the following command:
show system info
2.
Verify that:
•
the serial number is unknown
•
the firewall has no licenses
•
the configuration is intact
Step 4
Register the new auth-code on the
support portal.
See
Register the VM-Series Firewall
.