How you upgrade to PAN-OS 7.1 depends on whether you have standalone firewalls or firewalls in a high availability (HA) configuration and, for either scenario, whether Panorama manages your firewalls. Review the PAN-OS 7.1 Release Notes and then follow the procedure specific to your configuration:
When upgrading firewalls that you manage with Panorama or firewalls that are configured to forward content to a WF-500 appliance, you must first upgrade Panorama and its Log Collectors and upgrade the WF-500 appliance, before upgrading the firewalls.

Related Documentation