Automatic Content Updates Through Offline Panorama

Deploy an SCP server.
Dynamic updates for managed firewalls, Log Collectors, and WildFire appliances downloads from the internet-connected Panorama. The air-gapped Panorama downloads the dynamic updates from the SCP server and then installs the updates on managed firewalls, WildFire appliances, and Log Collectors.
When you create the folder directory for dynamic updates, it is a best practice to create a folder for each type of type of dynamic update. This is the burden of managing a large volume of dynamic updates and reduces the possibility of deleting dynamic updates that should not be deleted from the SCP server.
Set up the Panorama with internet access.
This Panorama communicates with the Palo Alto Networks update server and downloads the dynamic updates to the SCP server.
Set Up Panorama.
Log in to the Panorama web interface.
Create an SCP server profile.
Select
Panorama
Server Profiles
SCP
and
Add
a new SCP server profile.
Enter a descriptive
Name
for the SCP server profile.
Enter the SCP
Server
IP address.
Enter the
Port
.
Enter the SCP server
User Name
.
Enter the SCP server
Password
and
Confirm Password
.
Click
OK
to save your changes.
Create a dynamic update schedule to regularly download content updates to the SCP server.
You must create a schedule for each type of dynamic update you intend to automatically download and install on managed firewalls, Log Collectors, and WildFire appliances.
Commit
your changes.
Set up the air-gapped Panorama.
This Panorama communicates with the SCP server to download the dynamic updates and then installs the updates on managed firewalls, Log Collectors, and WildFire appliances.
Configure the air-gapped Panorama to download dynamic updates from the SCP server and then install the updates on your managed firewalls, Log Collectors, and WildFire appliances.
Log in to the Panorama web interface.
Create an SCP server profile.
Select
Panorama
Server Profiles
SCP
and
Add
a new SCP server profile.
Enter a descriptive
Name
for the SCP server profile.
Enter the SCP
Server
IP address.
Enter the
Port
.
Enter the SCP server
User Name
.
Enter the SCP server
Password
and
Confirm Password
.
Click
OK
to save your changes.
Create a dynamic update schedule to regularly download content updates from the SCP server.
You must create a schedule for each type of dynamic update you intend to automatically download and install on managed firewalls, Log Collectors, and WildFire appliances.
Commit
your changes.