>
    Strata Copilot
    Cadence for Software and Content Updates for Prisma Access (Managed by Panorama)
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access Releases and Upgrades
    5. Cadence for Software and Content Updates for Prisma Access
    6. Cadence for Software and Content Updates for Prisma Access (Managed by Panorama)
    Download PDF
    Prisma Access

    Cadence for Software and Content Updates for Prisma Access (Managed by Panorama)

    Table of Contents

    Cadence for Software and Content Updates for Prisma Access (Managed by Panorama)

    How often the Prisma Access components (for a Prisma Access (Managed by Panorama) deployment) are updated, and who updates them (you or Palo Alto Networks).
    The following table informs you of the software and content updates to get the latest applications and threat signatures and leverage the threat prevention capabilities provided by Palo Alto Networks. If the Cloud Controlled? column has an attribute of No, you perform the required actions to update the component.
    ComponentUpdate ScheduleCloud Controlled? (Yes/No)Comments
    Upgrades to Panorama software for compatibility with Prisma Access
    For major Prisma Access releases, you might need to upgrade your Panorama version for the following use cases:
    • Required Upgrade—On occasion, you will be required to upgrade the software version on Panorama to maintain compatibility with Prisma Access.
      • Maintenance Window—Your organization will need to schedule a maintenance window to upgrade the Panorama software version.
      • Impact—You cannot use the new plugin version until you upgrade your Panorama version.
      • Notification—Palo Alto Networks will provide you with a notification 100 days before the scheduled major release upgrade.
    • Optional Upgrade—In other cases, you might need to upgrade the Panorama software version to use the new features that Prisma Access supports in the major release.
      • Maintenance Window—Your organization will need to schedule a maintenance window to upgrade the Panorama software version.
      • Impact—You cannot use the new features that Prisma Access supports until you upgrade your Panorama.
      • Notification—Palo Alto Networks will notify you of any Panorama requirements 21 days before a scheduled major release upgrade as defined in Prisma Access Release Types.
    		NoSee End-of-Support (EoS) Dates for Panorama Software Version Compatibility with Prisma Access to learn when a Panorama version becomes incompatible with Prisma Access. See Prisma Access for the currently supported Panorama versions to use with Prisma Access. To upgrade your Panorama to a new version, see Install Content and Software Updates for Panorama.
    Cloud Services plugin version
    Available after the plugin release.
    		NoYou perform the tasks to upgrade the plugin. See Prisma Access Release Types for details about when Prisma Access updates its plugin version. See Upgrade the Cloud Services Plugin to upgrade the plugin in the Panorama appliance.
    GlobalProtect app
    • Major GlobalProtect App Releases (for example, x.0 or 5.x)—Prisma Access updates the agent on the portal with the latest major release 7-10 days after the general availability of the x.0.1 version of that release.
      For example, given an agent release of 5.1, Prisma Access updates the agent on the portal 7-10 days after the release of 5.1.1.
    • Minor GlobalProtect App Releases (for example, 5.1.x)—Prisma Access updates the agent on the portal with the latest infrastructure maintenance 7-10 days after the general availability of that release.
    		Yes
    The cloud controls the versions of the app that are available for upgrade; however you can choose between several different hosted versions of the app and can control how and when to roll out GlobalProtect app updates to the end users. See GlobalProtect App Upgrades for details.
    If your Prisma Access deployment requires a hotfix of the GlobalProtect app, open a Support Case with Palo Alto Networks Technical Support for assistance.
    Applications and threat updates
    Daily with a threshold of 24 hours.
    Palo Alto Networks releases New App-IDs on the third Tuesday of every month. Plan to review and incorporate these new App-IDs within the 24 hour threshold.
    The New App-ID characteristic lets you see new applications on your network and shows you details about newly-categorized application activity. What you learn can help you make the right decisions about how you to update your security policy to enforce the most recently-categorized App-IDs.
    		Yes
    Antivirus protection
    Every hour, 10 minutes after the hour
    		YesPrisma Access is always up-to-date with the latest Antivirus release.
    WildFire
    Real-Time
    		YesPrisma Access retrieves WildFire signatures for newly-discovered malware as soon as the WildFire public cloud can generate them.
    GlobalProtect Data File
    Every hour
    		YesPrisma Access is always up-to-date with the latest GlobalProtect data file release.
    Clientless VPN application signatures
    Every hour
    		YesPrisma Access is always up-to-date with the latest Clientless VPN application signature release.
    Network Time Protocol (NTP)Dependent on the underlying cloud providerYes
    Prisma Access Security Processing nodes synchronize their time using the underlying cloud providers' Network Time Protocol (NTP) addresses. You cannot configure or change NTP through Strata Cloud Manager. This is a system-level function handled by the Prisma Access infrastructure to ensure accurate and consistent timekeeping across all nodes.

    © 2026 Palo Alto Networks, Inc. All rights reserved.