Install

Log in to the firewall web interface.
Select
Device
Software
and
Check Now
to retrieve the latest PAN-OS software patches from the Palo Alto Networks Update Server.
Check (enable)
Include Patch
to display all available PAN-OS software patches.
Locate the software patch for the PAN-OS release currently installed on your Next-Gen firewall.
A software patch is denoted by a
Patch
label displayed alongside the
Version
name.
View
More Info
to review the software patch details such as the critical bug and CVE fixes and whether the Next-Gen firewall needs to be restarted for the fixes to be applied.
Download
the software patch.
(
HA only
) Check (enable) Sync to HA Peer and
Continue Download
to download the PAN-OS software patch.
Click
Close
after the software patch successfully downloaded.
Install
the software patch.
After the software patch has successfully installed, click
Close
.
Apply
the software patch.
Click
Apply
when prompted to confirm you want to apply the installed PAN-OS software patch to the Next-Gen firewall.
A status bar is displayed showing the current progress of the PAN-OS software patch application. Click
Close
after the patch is successfully applied.
At this point, the firewall automatically reboots if a reboot is required to complete applying the PAN-OS software patch to the Next-Gen firewall.
(
HA only
) Install the PAN-OS software patch on the firewall HA peer.
Log in to the firewall web interface of the HA peer.
Select
Device
Software
Check Now
.
Install
the software patch.
Reboot the firewall if required.