Firewall Software and Content Updates

To install a software or content update on a managed firewall, first use the
Panorama
Device Deployment
pages to download or upload the update to Panorama. Then select the
Panorama
Managed Devices
page, click
Install
, and complete the following fields.
To reduce traffic on the management (MGT) interface, you can configure Panorama to use a separate interface for deploying updates (see Panorama > Setup > Interfaces).
Firewall Software/Content Update Installation Options
Description
Type
Select the type of update you want to install: PAN-OS
Software
,
GlobalProtect Client
software,
Apps and Threats
signatures,
Antivirus
signatures,
WildFire
, or
URL Filtering
.
File
Select the update image. The drop-down includes only images that you downloaded or uploaded to Panorama using the
Panorama
Device Deployment
pages.
Filters
Select Filters to filter the Devices list.
Devices
Select the firewalls on which you want to install the image.
Device Name
The firewall name.
Current Version
The update version of the selected
Type
that is currently installed on the firewall.
HA Status
Indicates whether the firewall is:
  • Active
    —Normal traffic-handling operational state
  • Passive
    —Normal backup state
  • Initiating
    —The firewall is in this state for up to 60 seconds after bootup
  • Non-functional
    —Error state
  • Suspended
    —An administrator disabled the firewall
  • Tentative
    —For a link or path monitoring event in an active/active configuration
Group HA Peers
Select to group firewalls that are peers in a high availability (HA) configuration.
Filter Selected
If you want the Devices list to display only specific firewalls, select the corresponding device names and
Filter Selected
.
Upload only to device
Select to upload the image on the firewall but not automatically reboot the firewall. The image is installed when you manually reboot the firewall.
Reboot device after Install (
Software only
)
Select to upload and install the software image. The installation process triggers a reboot.
Disable new apps in content update (
Apps and Threats only
)
Select to disable applications in the update that are new relative to the last installed update. This protects against the latest threats while giving you the flexibility to enable applications after preparing any policy updates. Then, to enable applications, log in to the firewall, select
Device
Dynamic Updates
, click
Apps
in the Features column to display the new applications, and click
Enable/Disable
for each application you want to enable.

Related Documentation