• Validate there are no pending changes that need to be committed

• Take a named configuration snapshot

• Export the named snapshot to your local workstation

• Validate you have SSH access to the firewall

• Check for known issue with intermediate software version that may be required to install when jumping up multiple software revisions

Device backups should be taken prior to started and exported to your local workstation prior to beginning

1. Navigate to Device > Setup > Operations

   1. Save a named configuration snapshot 

1. Export the named configurations snapshot

Software images can be downloaded and installed from the Device > Software menu.
  

1. Check for the latest code updates from palo alto

   • Even if the software version is listed still resync the software to prevent possible issues downloading the software update

1. Click the Download link next to the PAN-OS version you want to upgrade to and wait for the download dialog to complete.

   1. Once the new PAN-OS package is downloaded validate the software package

1. Install the it will be listed as such on the Software page, as shown. Click the Install link next to the image to start the installation:

   1. Process takes 15 - 60 minutes

1. At the end of the installation, you will be prompted to reboot. You can skip the reboot and schedule a reboot after hours to complete the installation.

Upon reboot review the following

• Validate DHCP is working 

• Validate that the firewall can connect to the Palo Alto security network for NGFW features

• validate VPN tunnels come back online 

• Validate RAVPN by connecting (Admin and Staff)

• validate outbound traffic is working 

• validate dynamic route establishes 

        BGP, OSPF, RIP