Upgrade ZTNA Connectors
Focus
Focus
Prisma Access

Upgrade ZTNA Connectors

Table of Contents

Upgrade ZTNA Connectors

How to upgrade the software version of ZTNA connectors.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Prisma Access
    4.0
    Prisma Access
    5.0 supports wildcards and IP subnet-based app targets.
    Prisma Access
    5.0.1 supports associating multiple connector groups with FQDN Targets and Wildcard Targets and introduces proximity-based application routing.
  • ZTNA Connector add-on license
    The Business license with the add-on license includes eight ZTNA Connectors, 100 FQDN, and four IP subnet functionality.
    The Business Premium license with the add-on license includes 40 ZTNA Connectors, 300 FQDN, and unlimited IP subnet functionality.
    The Advanced license with the add-on license has unlimited ZTNA Connectors, FQDN, and IP subnet functionality.
  • If you don't purchase the ZTNA Connector add-on license,
    Prisma Access
    licenses include 20 apps, two connectors, and four IP subnets. This functionality is provided for the purpose of trying out ZTNA Connectors in your environment.
To keep the ZTNA Connectors up-to-date, you can update their software version. You also might be required to upgrade your connectors to support a new feature or functionality.
When a new ZTNA Connector version is released, the connectors in your deployment are checked and, if the released version is newer than the existing version, or if all connectors in the group are not on the same version, icons in the Connector Group area shows that an update is available. If you choose to update the connectors, you are given an option to upgrade the entire group together. Upgrading a group automatically upgrades all connectors in that group in paralell. You cannot upgrade individual connectors.
A ZTNA Connector takes approximately 8 to 10 minutes to upgrade and the connector is rebooted during this process. Palo Alto Networks recommends that you schedule a connector upgrade during a down time or a scheduled network outage.
  1. Go to
    ZTNA Connector
    Connector Groups
    . Green arrows indicate that an upgrade is available.
    You can only upgrade to the latest image version that is available for the tenant.
  2. Click the green arrow next to the connector group.
  3. Select
    Install Now
    to upgrade the connector group now, or
    Schedule
    and provide a time and date for the upgrade. The time displayed is the local time zone for the admin using the ZTNA UI.
    You can
    Cancel Scheduled Upgrade
    up to five minutes before it begins.
  4. Check the status of the connectors by viewing the icon under
    Connector Version
    .
    Icon
    Description
    Upgrade is available.
    Upgrade is scheduled.
    Upgrade has started and is in progress.
    No Icon (Only Connector version is displayed)
    Upgrade was successful.
    Not all of the connectors were upgraded.
    Upgrade failed.

Recommended For You