Cadence for Software and Content Updates for Prisma Access
How often the Prisma Access components (for a Panorama
Managed deployment) are updated, and who updates them (you or Palo
Alto Networks).
The following table informs you of the software and
content updates to get the latest applications and threat signatures
and leverage the threat prevention capabilities provided by Palo
Alto Networks. If the Cloud Controlled? column
has an attribute of No, you perform the required
actions to update the component.
Component
Update Schedule
Cloud Controlled? (Yes/No)
Comments
Upgrades to Panorama software for compatibility
with Prisma Access
For major Prisma Access releases, you might need
to upgrade your Panorama version for the following use cases:
Required Upgrade—On occasion, you will be required
to upgrade the software version on Panorama to maintain compatibility with Prisma
Access.
Maintenance Window—Your organization
will need to schedule a maintenance window to upgrade the Panorama
software version.
Impact—You cannot use the new plugin version until
you upgrade your Panorama version.
Notification—Palo Alto Networks will provide you with
a notification 100 days before the scheduled major release upgrade.
Optional Upgrade—In other cases, you might need to upgrade
the Panorama software version to use the new features that Prisma
Access supports in the major release.
Maintenance Window—Your
organization will need to schedule a maintenance window to upgrade
the Panorama software version.
Impact—You cannot use the new features that Prisma Access
supports until you upgrade your Panorama.
Notification—Palo Alto Networks will notify you of any
Panorama requirements 21 days before a scheduled major release upgrade as
defined in Prisma Access Release Types.
Major GlobalProtect App Releases
(for example, x.0 or 5.x)—Prisma Access updates
the agent on the portal with the latest major release 7-10 days after
the general availability of the x.0.1 version of that release.
For
example, given an agent release of 5.1, Prisma Access updates the
agent on the portal 7-10 days after the release of 5.1.1.
Minor GlobalProtect App Releases (for example, 5.1.x)—Prisma
Access updates the agent on the portal with the latest infrastructure
maintenance 7-10 days after the general availability of that release.
Yes
The cloud controls the versions of the app
that are available for upgrade; however you can choose between several
different hosted versions of the app and can control how and when
to roll out GlobalProtect app updates to the end users. See Manage GlobalProtect App Upgrades in Prisma Access for details.
If
your Prisma Access deployment requires a hotfix of the GlobalProtect
app, open a Support Case with Palo Alto
Networks Technical Support for assistance.
We
release New App-IDs on the third Tuesday of every month. Plan to
review and incorporate these new App-IDs within the 24 hour threshold. Use
the New App-ID filter to minimize
this possible traffic impact.
