Next-Generation Firewall
Manage Panorama Software Updates
Table of Contents
Manage Panorama Software Updates
Select to perform the tasks
described in the following table.
By default, the Panorama management server saves up to
two software updates. To make space for newer updates, the server
automatically deletes the oldest update. You can change the number of software images that Panorama
saves and manually delete images to free up space.
Refer
to Install Content and Software
Updates for Panorama for important information about version
compatibility.
Task | Description |
|---|---|
Check Now | If Panorama has access to the Internet, Check Now to
display the latest update information (see Display
Panorama Software Update Information). If Panorama
does not have access to the external network, use a browser to visit
the Software Update site for
update information. |
Upload | To upload a software image when Panorama
does not have access to the Internet, use a browser to visit theSoftware Update site, locate
the desired release and download the software image to a computer that
Panorama can access, select , click Upload, Browse to
and select the software image, and click OK.
When the upload is complete, the Downloaded column displays a check
mark and the Action column displays Install. |
| Preferred Releases (PAN-OS 10.2.10 and later 10.2
releases) | Select the Preferred Releases
checkbox to view the list of preferred releases. Preferred releases
offer the latest and advanced features. Ensure that you use preferred
releases for stability and optimal performance. By default, both
preferred and base releases are selected. If
Panorama does not have access to the external network, use a browser
to visit the Software Update site to
view the preferred releases. |
| Base Releases (PAN-OS 10.2.10 and later 10.2
releases) |
Select the Base Releases checkbox to
view the list of base releases. A base release is the earliest
version of a specific release.
By default, both preferred and base releases are selected.
If Panorama does not have access to the external network,
use a browser to visit the Software Update site to
view the base releases.
|
Validate | If Panorama has access to the Internet, Validate (Action
column) the desired release. Select the devices you want to upgrade
(Deploy column), select Panorama as the upgrade
source, and click Download. When the download
is complete, the Downloaded column displays a check mark. The SCP
Server and the Update Server are
not available as download sources in PAN-OS 10.2.0. |
Install | Install (Action column)
the software image. When the installation finishes, Panorama logs
you out while it reboots. Panorama periodically performs
a file system integrity check (FSCK) to prevent corruption of the
Panorama system files. This check occurs after eight reboots or
at a reboot that occurs 90 days after the last FSCK. A warning appears
in the web interface and SSH login screens if an FSCK is in progress
and you cannot log in until it completes. The time to complete this process
varies by storage system size; for a large system, it can take several hours
before you can log back into Panorama. To view progress, set up
console access to Panorama. |
Release Notes | If Panorama has access to the Internet,
you can access the Release Notes for the
desired software release and review the release changes, fixes,
known issues, compatibility issues, and changes to default behavior. If
Panorama does not have access to the Internet, use a browser to
visit the Software Update site and download the
appropriate release. |
| Deletes a software image when no longer
needed or when you want to free up space for more images. |