Focus
Focus
Table of Contents

Install

Install critical bug and Common Vulnerability and Exposure (CVE) fixes for your managed devices when your Panorama™ management server has outbound internet access.
  1. Select
    Panorama
    Device Deployment
    Software
    and
    Check Now
    to retrieve the latest PAN-OS software patches from the Palo Alto Networks Update Server.
  2. Check (enable)
    Include Patch
    to display all available PAN-OS software patches.
  3. Locate the software patch for the PAN-OS release currently installed on your managed devices.
    A software patch is denoted by a
    Patch
    label displayed alongside the
    Version
    name.
  4. View
    More Info
    to review the software patch details such as the critical bug and CVE fixes and whether your managed devices need to be restarted for the fixes to be applied.
  5. Download
    the software patch.
    (
    HA only
    ) Check (enable) Sync to HA Peer and
    Continue Download
    to download the PAN-OS software patch.
    Click
    Close
    after the software patch successfully downloaded.
  6. Install
    the software patch.
    After the software patch has successfully installed, click
    Close
    .
  7. Select the managed devices on which you want to install the PAN-OS software patch and click
    OK
    .
    (
    HA only
    ) If you are installing a software patch on a pair of managed devices in a high availability (HA) configuration, you must select and install the software patch on both HA peers.
  8. Apply
    the software patch.
    Click
    Apply
    when prompted to confirm you want to apply the installed PAN-OS software patch to your managed devices.
    A status bar is displayed showing the current progress of the PAN-OS software patch application. Click
    Close
    after the patch is successfully applied.
    At this point, the firewall automatically reboots if a reboot is required to complete applying the PAN-OS software patch to your managed devices.

Recommended For You