Panorama™ requires a direct internet connection for scheduling Supported
Updates on firewalls, Log Collectors, and WildFire® appliances and
appliance clusters. Otherwise, you can perform only on-demand updates. (To schedule
Antivirus, WildFire, or BrightCloud URL updates for Log Collectors, the Log
Collectors must be running Panorama 7.0.3 or a later release.) Each firewall, Log
Collector, or WildFire appliance or appliance cluster receiving an update generates
a log to indicate that the installation succeeded (a Config log) or failed (a System
log). To schedule updates on the Panorama management server, see Install Updates for
Panorama with an Internet Connection.
Panorama can download only one update at a time for
updates of the same type. If you schedule multiple updates of the
same type to download during the same time Recurrence, only the
first download succeeds.
If your firewalls connect directly to the Palo Alto Networks® Update Server, you can also use
Panorama templates (
) to push content update schedules to
the firewalls. If you want to delay the installation of updates for a period
after they are released, you must deploy schedules using templates. In rare
instances, a content update includes errors; specifying a delay increases the
likelihood that Palo Alto Networks will identify and remove such an update from
the Update Server before your firewalls install it.
Perform the following steps
for each update type you want to schedule.
(to identify the
schedule), the update
, and the update frequency
). The frequency options depend
on the update
PAN-OS® uses the Panorama timezone for update scheduling.