Firewall Software and Content Updates
To install a software or content update on a managed firewall, first use the PanoramaDevice Deployment pages to download or upload the update to Panorama. Then select the PanoramaManaged Devices page, click Install, and complete the following fields.
To reduce traffic on the management (MGT) interface, you can configure Panorama to use a separate interface for deploying updates (see Panorama > Setup > Interfaces).
Firewall Software/Content Update Installation Options
Select the type of update you want to install: PAN-OS Software, GlobalProtect Client software, Apps and Threats signatures, Antivirus signatures, WildFire, or URL Filtering.
Select the update image. The drop-down includes only images that you downloaded or uploaded to Panorama using the PanoramaDevice Deployment pages.
Select Filters to filter the Devices list.
Select the firewalls on which you want to install the image.
The firewall name.
The update version of the selected Type that is currently installed on the firewall.
Indicates whether the firewall is:
Group HA Peers
Select to group firewalls that are peers in a high availability (HA) configuration.
If you want the Devices list to display only specific firewalls, select the corresponding device names and Filter Selected.
Upload only to device
Select to upload the image on the firewall but not automatically reboot the firewall. The image is installed when you manually reboot the firewall.
Reboot device after Install (Software only)
Select to upload and install the software image. The installation process triggers a reboot.
Disable new apps in content update (Apps and Threats only)
Select to disable applications in the update that are new relative to the last installed update. This protects against the latest threats while giving you the flexibility to enable applications after preparing any policy updates. Then, to enable applications, log in to the firewall, select DeviceDynamic Updates, click Apps in the Features column to display the new applications, and click Enable/Disable for each application you want to enable.
Manage Software and Content Updates
Manage Software and Content Updates Panorama > Device Deployment > Software Panorama provides the following options for deploying software and content updates to firewalls and ...
Upgrade Firewalls When Panorama Is Not Internet-Connected
Upgrade firewall software to PAN-OS® 8.1 and install content updates using Panorama™ when Panorama is not connected to the internet. ...
Software Updates for Dedicated Log Collectors
Software Updates for Dedicated Log Collectors Panorama > Managed Collectors To install a software image on a Dedicated Log Collector, download or upload the image ...
Add the Managed Firewalls and Deploy Updates
Add the Managed Firewalls and Deploy Updates The first task in Use Case: Configure Firewalls Using Panorama is to add the firewalls as managed devices ...
Device > Software
Device > Software Select Device Software to view the available software releases, to download or upload a release, to install a release (a support license ...
Host App Updates on the Portal
Host App Updates on the Portal The simplest way to deploy the GlobalProtect app software is to download the new app installation package to the ...
Upgrade Log Collectors When Panorama Is Not Internet-Connec...
Upgrade Log Collector software to PAN-OS® 8.1 and install content updates using Panorama™ when Panorama is not connected to the internet. ...
Upgrade Firewalls When Panorama is Internet-Connected
Procedure to upgrade managed firewalls when Panorama is Internet connected. ...
Device > Dynamic Updates
Device > Dynamic Updates Device > Dynamic Updates Panorama > Dynamic Updates Palo Alto Networks regularly posts updates that include new and modified applications, threat ...