For hardware appliances, downloading the 500MB+ ISO through the web GUI can be slow. Palo Alto recommends using the SCP or FTP links provided in the portal to pull the file directly to a jump server.
Unlike a Windows or Linux ISO, this isn't an installer for an operating system. The Palo Alto ISO is a recovery and diagnostic utility. Download Palo Alto Iso Image
It is a lightweight, bootable Linux environment designed specifically for Palo Alto hardware (PA-220, PA-800, PA-3000 Series, etc.). When you boot a firewall from this ISO (via iLO, IPMI, or a USB drive), you bypass the normal firewall OS (PAN-OS) to perform low-level maintenance. For hardware appliances, downloading the 500MB+ ISO through
If you have a support account provided by your organization, follow these steps: Note: The "Base Image" is required if you
Note: The "Base Image" is required if you are installing the firewall for the first time. Upgrade images are only for updating existing firewalls.
Last Updated: May 2026
Before you spend time downloading, ensure your hypervisor has enough resources. A PA-VM is not a lightweight router.