Sometimes a firmware upgrade resets the candidate config state. Perform a commit force:
commit force
Warning: This re-pushes the entire configuration, which can drop sessions briefly.
Firmware Baseline – PA-220 Edge Firewalls
All PA-220 units must remain on PAN-OS 10.1.6-h3 until Q3 2024 due to a critical CVE fix (CVSS 9.8) in the management web interface. pa-220 firmware
Auto-update: Disabled.
Approved upgrade path: Only via signed images from the Palo Alto Support Portal.
Next scheduled upgrade: November 2024 (to PAN-OS 11.0.2)
# Download the firmware
request system software download version 10.1.10
You cannot download PA-220 firmware from a public mirror. It requires a valid Support Contract and login credentials. Sometimes a firmware upgrade resets the candidate config
Critical alert: Avoid "Early Availability" releases on a production PA-220 unless a specific CVE fix is required.
PAN-OS 10.1.6-h3 for PA-220
Released: March 15, 2024 Warning: This re-pushes the entire configuration, which can
New Features & Improvements
Resolved Issues
Known Issues
Download
PA-220-10.1.6-h3.pkg
Size: 345 MB | SHA-256: 8a7f...c93e