Prisma Access
Cadence for Software and Content Updates for Prisma Access
Table of Contents
Expand All
|
Collapse All
Prisma Access Docs
-
-
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
-
-
-
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Cadence for Software and Content Updates for Prisma Access
How often the Prisma Access components are updated, and who updates them
(you or Palo Alto Networks).
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Cadence for Software and Content Updates for Prisma Access (Managed by Strata Cloud Manager)
Learn more about how Prisma Access updates its infrastructure components.
The following table describes how Prisma Access updates its infrastructure components,
including content and software updates. This table also indicates whether Prisma Access
automatically updates the software. If any updates are not automatic, you can learn how
to apply those infrastructure updates.
You can also check the status of all cloud services
from the hub.
| Component | Update Schedule | Comments |
|---|---|---|
|
GlobalProtect app
|
|
The cloud controls the version of the app that is available for
upgrade.
|
|
PAN-OS software upgrades in the Prisma Access
infrastructure—scheduled
|
Palo Alto Networks® upgrades the PAN-OS infrastructure when a new
version of Prisma Access is released. Palo Alto Networks® provide
you with three weeks’ notice before a scheduled upgrade.
|
Sign up to receive infrastructure upgrades by email or text
notifications at the Hub.
|
| Applications and threat updates |
Daily with a threshold of 24 hours.
Palo Alto Networks® releases New App-IDs on the third Tuesday of
every month. Plan to review and incorporate these new App-IDs within
the 24 hour threshold. Use the New App-ID filter to minimize this
possible traffic impact.
The New App-ID characteristic lets you see new applications on your
network and shows you details about newly-categorized application
activity. What you learn can help you make the right decisions about
how you to update your security policy to enforce the most
recently-categorized App-IDs.
| |
| Antivirus protection |
Every hour, 10 minutes after the hour
|
Prisma Access is always up-to-date with the latest Antivirus
release.
|
| GlobalProtect Data File |
Every hour
|
Prisma Access is always up-to-date with the latest GlobalProtect data
file release.
|
| Clientless VPN
application signatures |
Every hour
|
Prisma Access is always up-to-date with the latest Clientless VPN
application signature release.
|
Cadence for Software and Content Updates for Prisma Access (Managed by Panorama)
How often the Prisma Access components (for
a Prisma Access (Managed by Panorama) deployment) are updated, and who updates them
(you or Palo Alto Networks).
The following table informs you of the software and content updates to get the latest
applications and threat signatures and leverage the threat prevention capabilities
provided by Palo Alto Networks. If the Cloud Controlled? column
has an attribute of No, you perform the required actions to
update the component.
| Component | Update Schedule | Cloud Controlled? (Yes/No) | Comments |
|---|---|---|---|
| Upgrades to Panorama software for compatibility with Prisma Access |
For major Prisma Access releases, you might need to upgrade your
Panorama version for the following use cases:
| No | See End-of-Support (EoS) Dates for Panorama Software Version Compatibility with Prisma Access to learn when a Panorama version becomes incompatible with Prisma Access. See Prisma Access for the currently supported Panorama versions to use with Prisma Access. To upgrade your Panorama to a new version, see Install Content and Software Updates for Panorama. |
| Cloud Services plugin version |
Available after the plugin release.
| No | You perform the tasks to upgrade the plugin. See Prisma Access Release Types for details about when Prisma Access updates its plugin version. See Upgrade the Cloud Services Plugin to upgrade the plugin in the Panorama appliance. |
| GlobalProtect app |
| Yes |
The cloud controls the versions of the app that are available for
upgrade; however you can choose between several different hosted
versions of the app and can control how and when to roll out
GlobalProtect app updates to the end users. See GlobalProtect App Upgrades for details.
If your Prisma Access deployment requires a hotfix of the
GlobalProtect app, open a Support Case with Palo
Alto Networks Technical Support for assistance.
|
| Applications and threat updates |
Daily with a threshold of 24 hours.
Palo Alto Networks releases New App-IDs on the third Tuesday of every
month. Plan to review and incorporate these new App-IDs within the
24 hour threshold.
The New App-ID characteristic lets you see new applications on your
network and shows you details about newly-categorized application
activity. What you learn can help you make the right decisions about
how you to update your security policy to enforce the most
recently-categorized App-IDs.
| Yes | |
| Antivirus protection |
Every hour, 10 minutes after the hour
| Yes | Prisma Access is always up-to-date with the latest Antivirus release. |
| WildFire |
Real-Time
| Yes | Prisma Access retrieves WildFire signatures for newly-discovered malware as soon as the WildFire public cloud can generate them. |
| GlobalProtect Data File |
Every hour
| Yes | Prisma Access is always up-to-date with the latest GlobalProtect data file release. |
| Clientless VPN application signatures |
Every hour
| Yes | Prisma Access is always up-to-date with the latest Clientless VPN application signature release. |