Pa-220 Firmware |work|

Generate a named configuration snapshot and export it to your local machine ( Device > Setup > Operations > Export named configuration snapshot ).

The console spat a single line: BootRecovery#

A: PAN-OS 9.1.x ended support on December 14, 2024. The minimum supported version today is PAN-OS 10.0.x (though 10.1.x is strongly recommended).

Navigate to Device > Dynamic Updates . Click Check Now , then download and install the latest Applications and Threats signatures. (PAN-OS upgrades often require minimum content baseline versions). pa-220 firmware

Before executing an upgrade, free up disk space via the CLI to prevent the upgrade script from failing due to lack of storage:

Navigate to Device > Software . Find the base version of the next major train (e.g., 10.2.0 ). Click Download (do not install the base image).

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. Generate a named configuration snapshot and export it

For the PA-220, stick to the most stable, mature PAN-OS 10.2 releases rather than attempting to force newer PAN-OS 11+ branches, as the hardware may struggle with performance.

Avoid "Early Availability" releases on a production PA-220 unless a specific CVE fix is required.

If the device does not come back online, you may need to use the console cable to observe the boot process or contact Palo Alto Support . Navigate to Device > Dynamic Updates

As of early 2026, the PA-220 remains a supported platform but is approaching its final stages of support.

Check the dashboard to ensure the new version is displayed. Verify that all interfaces are up.

: Be patient and do not interrupt the process. Ensure uninterrupted power to the firewall throughout the upgrade.