Rolling Upgrade
Learn the procedures for conducting a rolling upgrade on the HSF cluster.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- Software NGFW Credits
- HSF subscription license
|
To execute a rolling upgrade:
Ensure that the new image OVA file has been uploaded to the content
library on vCenter.
Modify the firewall image within the plugin configuration, commit
the changes, and then initiate an update.
The plugin will download the new firewall image, which can be found
under Device Deployment > Software.
Upload this image to all nodes within the HSF cluster.
Image installation proceeds one node at a time, commencing with the gateway nodes.
Following the successful installation of an image on a node, the node will reboot, and
the plugin will await the node's return to an Online state before proceeding to the
subsequent node. Should any failure occur or if an upgraded node fails to reach an
Online state.
| If rollback is enabled | All successfully upgraded nodes will revert to the previous
image, and the update workflow will be aborted. |
| If rollback is disabled | The remaining nodes will not be upgraded to the newer
PAN-OS image, and the update workflow will be aborted. |
In the event of an upgrade failure caused by an intermittent
issue, a recover operation can be utilized to reattempt a previously incomplete plugin
update.
