How to upgrade the software version of ZTNA connectors.
Where Can I Use This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
Prisma Access
4.0
Prisma Access
5.0 supports wildcards and IP subnet-based
app targets.
Prisma Access
5.0.1 supports associating multiple
connector groups with FQDN Targets and Wildcard Targets and
introduces proximity-based application routing.
ZTNA Connector add-on license
The Business license with the add-on license
includes eight ZTNA Connectors, 100 FQDN, and four IP subnet
functionality.
The Business Premium license with the add-on
license includes 40 ZTNA Connectors, 300 FQDN, and unlimited
IP subnet functionality.
The Advanced license with the add-on license has
unlimited ZTNA Connectors, FQDN, and IP subnet
functionality.
If you don't purchase the ZTNA Connector add-on license,
Prisma Access
licenses include 20 apps, two connectors,
and four IP subnets. This functionality is provided for the
purpose of trying out ZTNA Connectors in your environment.
To keep the ZTNA Connectors up-to-date, you can update their software version. You
also might be required to upgrade your connectors to support a new feature or
functionality.
When a new ZTNA Connector version is released, the connectors in your deployment are
checked and, if the released version is newer than the existing version, or if all
connectors in the group are not on the same version, icons in the Connector Group
area shows that an update is available. If you choose to update the connectors, you
are given an option to upgrade the entire group together. Upgrading a group
automatically upgrades all connectors in that group in paralell. You cannot upgrade
individual connectors.
A ZTNA Connector takes approximately 8 to 10 minutes to
upgrade and the connector is rebooted during this process. Palo Alto Networks
recommends that you schedule a connector upgrade during a down time or a scheduled
network outage.
Go to
ZTNA Connector
Connector Groups
. Green arrows indicate that an upgrade is available.
You can only upgrade to the latest image version that is available for the
tenant.
Click the green arrow next to the connector group.
Select
Install Now
to upgrade the connector group now,
or
Schedule
and provide a time and date for the upgrade.
The time displayed is the local time zone for the admin using the ZTNA
UI.
You can
Cancel Scheduled Upgrade
up to five minutes
before it begins.
Check the status of the connectors by viewing the icon under