Upgrade ZTNA Connectors
Focus
Focus
Prisma Access

Upgrade ZTNA Connectors

Table of Contents

Upgrade ZTNA Connectors

How to upgrade the software version of ZTNA connectors.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Prisma Access 4.0
  • ZTNA Connector add-on license
    The Essential license with the add-on license includes 8 ZTNA Connectors, 100 FQDNs, and 4 IP subnet functionality.
    The Advanced license with the add-on license includes 40 ZTNA Connectors, 300 FQDNs, and 1024 IP subnet functionality.
    The Premium license with the add-on license includes 200 ZTNA Connectors, 4000 FQDNs, and 1024 IP subnet functionality.
  • If you don't purchase the ZTNA Connector add-on license, Prisma Access licenses include four connectors, 40 FQDNs, and four IP subnets. This functionality is provided for the purpose of trying out ZTNA Connectors in your environment.
To keep the ZTNA Connectors up-to-date, you can update their software version. You also might be required to upgrade your connectors to support a new feature or functionality.
When a new ZTNA Connector version is released, the connectors in your deployment are checked and, if the released version is newer than the existing version, or if all connectors in the group are not on the same version, icons in the Connector Group area shows that an update is available. If you choose to update the connectors, you are given an option to upgrade the entire group together. Upgrading a group automatically upgrades all connectors in that group in paralell. You cannot upgrade individual connectors.
A ZTNA Connector takes approximately 8 to 10 minutes to upgrade and the connector is rebooted during this process. Palo Alto Networks recommends that you schedule a connector upgrade during a down time or a scheduled network outage.
  1. Go to ZTNA ConnectorConnector Groups. Green arrows indicate that an upgrade is available.
    You can only upgrade to the latest image version that is available for the tenant.
  2. Click the green arrow next to the connector group.
  3. Select Install Now to upgrade the connector group now, or Schedule and provide a time and date for the upgrade. The time displayed is the local time zone for the admin using the ZTNA UI.
    You can Cancel Scheduled Upgrade up to five minutes before it begins.
  4. Check the status of the connectors by viewing the icon under Connector Version.
    IconDescription
    Upgrade is available.
    Upgrade is scheduled.
    Upgrade has started and is in progress.
    No Icon (Only Connector version is displayed)
    Upgrade was successful.
    Not all of the connectors were upgraded.
    Upgrade failed.