Schedule a Content Update Using Panorama
Table of Contents
PAN.OS 11.1 & Later
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Upgrade Panorama and Managed Devices in FIPS-CC Mode
- Downgrade from Panorama 11.1
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Schedule a Content Update Using Panorama
Panorama™ requires a direct internet connection for scheduling Supported
Updates on firewalls, Log Collectors, and WildFire® appliances and
appliance clusters. Otherwise, you can perform only on-demand updates. (To schedule
Antivirus, WildFire, or BrightCloud URL updates for Log Collectors, the Log
Collectors must be running Panorama 7.0.3 or a later release.) Each firewall, Log
Collector, or WildFire appliance or appliance cluster receiving an update generates
a log to indicate that the installation succeeded (a Config log) or failed (a System
log). To schedule updates on the Panorama management server, see Install Updates for
Panorama with an Internet Connection.
Before deploying updates, see Panorama, Log
Collector, Firewall, and WildFire Version Compatibility for important
details about content release version compatibility. Refer to the Release Notes for the minimum content
release version you must install for a Panorama release.
Panorama can download only one update at a time for
updates of the same type. If you schedule multiple updates of the
same type to download during the same time Recurrence, only the
first download succeeds.
If your firewalls connect directly to the Palo Alto Networks® Update Server, you can also use
Panorama templates (DeviceDynamic Updates) to push content update schedules to
the firewalls. If you want to delay the installation of updates for a period
after they are released, you must deploy schedules using templates. In rare
instances, a content update includes errors; specifying a delay increases the
likelihood that Palo Alto Networks will identify and remove such an update from
the Update Server before your firewalls install it.
Perform the following steps
for each update type you want to schedule.
- Select PanoramaDevice DeploymentDynamic Updates, click Schedules, and Add a schedule.Specify a Name (to identify the schedule), the update Type, and the update frequency (Recurrence). The frequency options depend on the update Type.PAN-OS® uses the Panorama timezone for update scheduling.If you set the Type to App and Threat, Log Collectors install and need only the Applications content, not the Threats content. Firewalls use both Applications and Threats content. For details, see Panorama, Log Collector, Firewall, and WildFire Version Compatibility.Select one of the following schedule actions and then select the firewalls or Log Collectors:
- Download And Install (Best Practice)—Select Devices (firewalls), Log Collectors, or WildFire Appliances and Clusters.
- Download Only—Panorama downloads the update but does not install it.
Click OK.Select CommitCommit to Panorama and then Commit your changes.