Install

1. Log in to the Panorama web interface.
2. Select PanoramaDevice DeploymentSoftware and Check Now to retrieve the latest PAN-OS software patches from the Palo Alto Networks Update Server.
3. Check (enable) Include Patch to display all available PAN-OS software patches.
4. Locate the software patch for the PAN-OS release currently installed on your managed devices.

   A software patch is denoted by a Patch label displayed alongside the Version name.
5. View More Info to review the software patch details such as the critical bug and CVE fixes and whether your managed devices need to be restarted for the fixes to be applied.
6. Download the software patch.

   (HA only) Check (enable) Sync to HA Peer and Continue Download to download the PAN-OS software patch.

   Click Close after the software patch successfully downloaded.
7. Install the software patch.

   After the software patch has successfully installed, click Close.
8. Select the managed devices on which you want to install the PAN-OS software patch and click OK.

   (HA only) If you are installing a software patch on a pair of managed devices in a high availability (HA) configuration, you must select and install the software patch on both HA peers.
9. Apply the software patch.

   Click Apply when prompted to confirm you want to apply the installed PAN-OS software patch to your managed devices.

   A status bar is displayed showing the current progress of the PAN-OS software patch application. Click Close after the patch is successfully applied.

   At this point, the firewall automatically reboots if a reboot is required to complete applying the PAN-OS software patch to your managed devices.