Quickly Verifying Your Pan Os Version

how to check pan os version

Upgrading the software of a Palo Alto Networks firewall (PAN-OS) can be challenging, especially if it is in production. There are various ways to check the PAN-OS version, including through the Command Line Interface (CLI) or the WebGUI output. Using the CLI, the debug swm info command will display downloaded and activated software, while the show system info command will show the currently activated software. Alternatively, the WebGUI output displays all available software versions under Device > Software (For PAN-OS versions).

How to check PAN OS version

Characteristics Values
CLI command to check current activated software show system info
CLI command to check downloaded and activated software debug swm info
GUI command to check available software versions Device > Software (For PAN-OS versions)
Example base versions PAN-OS 9.0.0, 9.1.0, and 8.1.0
Example software version 8.1.17
Latest software version in the 8.x.x series 8.1.22
Preferred release for 8.1.x 8.1.21-h1
Software version for TLS 1.3 support 10 or 10.1
Latest software version 10.0.8-h4

cycookery

Using the debug swm info command

The "debug swm info" command is used to display information about downloaded and activated software on a device running PAN-OS. When this command is executed, it provides specific details about the software versions that have been downloaded and activated on the device.

To illustrate its usage, consider the following example output:

Admin@Lab196-96-PA-VM> debug swm list

Product B Version Built Loaded

-

Gpclient 5.2.2 2020-08-27 15:01:31 2020-11-20 13:49:44

Gpclient 5.2.4 2020-11-12 11:55:03 2020-11-20 13:48:50

Panos * 8.1.0 2018-02-28 18:48:00 2018-08-24 21:17:50

Panos * 9.0.0 2019-02-01 21:27:15 2020-02-10 19:53:09

Panos 9.0.5 2019-11-07 14:58:20 2020-07-27 19:05:30

Panos * 9.1.0 2019-12-12 19:44:18 2020-11-12 15:02:24

In this output, each row represents a software product, with columns indicating the product name, version, build date, and download date. The "*" under the "B" column indicates the base version, which serves as a reference point for other versions. For instance, PAN-OS 9.0.0, 9.1.0, and 8.1.0 are highlighted as the base versions in this example.

The "Loaded" column is particularly noteworthy as it showcases the date when a specific image or version was downloaded. This information is crucial for understanding the software's lifecycle and can guide decisions about upgrades or reverts.

By utilizing the "debug swm info" command, administrators gain insights into the software versions currently in use, helping them make informed choices about version updates, compatibility, and overall system management.

cycookery

Using the show system info command

To check the PAN OS version using the CLI, you can use the "show system info" command. This command will display the currently activated software.

Using the "show system info" command, you can view the current activated software on your PAN-OS device. This command is entered via the CLI and will provide information about the software currently running on your system.

The output of the "show system info" command will vary depending on the specific PAN-OS version and device you are using. However, you can expect to see information such as the PAN-OS version number, the model number of your device, and other relevant system details.

For example, if you are using PAN-OS 9.0.0, the output of the "show system info" command may include the following:

  • PAN-OS Version: 9.0.0
  • Model: PA-500
  • Serial Number: XXXXXXX
  • Hardware Version: 1.0
  • System uptime: 0 days, 2 hours, 30 minutes

This information can be used to verify the PAN-OS version running on your device, as well as to gather important system details for troubleshooting or informational purposes.

It is important to note that the "show system info" command may provide different levels of detail depending on your access privileges. Additionally, Palo Alto Networks may update the output of this command as new versions of PAN-OS are released.

cycookery

Viewing PAN-OS through the CLI

To view PAN-OS through the CLI, you can use the “debug swm info” command, which will display the downloaded and activated software. Another CLI command is “show system info”, which will display the currently activated software.

Using the CLI, you can also view and install PAN-OS software. The CLI output will display only the downloaded and activated software, while the WebGUI output displays all available software versions.

To view the PAN-OS or GlobalProtect Version through the CLI, you can use the “debug swm info” command, which will show you the downloaded and activated software. Alternatively, the “show system info” command will display the current activated software.

The “Loaded” column in the CLI output indicates the date the image was downloaded. For example, PAN-OS 9.0.0, 9.1.0, and 8.1.0 are the base versions, as indicated by the “B” under the “B” column.

cycookery

Viewing PAN-OS through the WebGUI

To view PAN-OS through the WebGUI, you can refer to the PAN-OS 8.1 Web Interface. This interface provides reference information about the PAN-OS and Panorama Web Interface. It is important to maintain up-to-date security practices to protect your network from cyberattacks and improve your overall security posture.

The PAN-OS 8.1 New Features Guide is a useful resource to learn about the new features introduced in PAN-OS 8.1. It provides an overview of each new feature and the steps to get started with them quickly and easily.

In some cases, you may encounter issues accessing the PAN WebGUI. If you are unable to access the PAN Webgui https, it is recommended to try different browsers and machines. Additionally, ensure that you are connecting to the dedicated OOB management interface or have a management profile assigned to the interface to allow GUI access.

If you need to view the last config version, you can run the command "show config audit version ". You can obtain the version number by tabbing and viewing all the versions stored on your system.

By following these steps, you can effectively view PAN-OS through the WebGUI and take advantage of the features and resources provided by Palo Alto Networks.

Effective Bleach Cleaning for Drip Pans

You may want to see also

cycookery

Understanding the base version

The base version of PAN-OS software is indicated by an asterisk under the B column. For example, PAN-OS 9.0.0, 9.1.0, and 8.1.0 are base versions.

Base versions are important as they are usually more stable and reliable compared to other versions. For instance, if you are using PAN-OS 8.1.x, you would want to update to the latest recommended version, 8.1.x, as it will include bug fixes and security updates for that specific code path.

However, if you are looking for the latest features, you would want to upgrade to a more recent base version, such as 10.1.x. It is important to note that while newer base versions offer new features, they may not be supported by all devices. For example, PAN-OS 10.2 introduced an advanced routing engine, but it is not supported on the PA220, PA800, PA3000, and PA5000 series.

Upgrading to a new base version can be done by downloading and installing the base image and the latest image, followed by a reboot. In some cases, you may be able to skip installing the base image and directly install the latest image, but this depends on the specific upgrade path and device compatibility.

Frequently asked questions

Use the "debug swm info" command to display only the downloaded and activated software. Alternatively, the command "show system info" will display the currently activated software.

Yes, you can check your PAN-OS version through the WebGUI. Go to Device > Software (For PAN-OS versions).

The * under the B column indicates the base version. The Loaded column displays the date the image was downloaded.

The CLI output will only display the downloaded and activated software, whereas the WebGUI output displays all available software versions.

Written by
Reviewed by

Explore related products

Pan

$4.45

Share this post
Print
Did this article help you?

Leave a comment