End-of-Life (EoL)
Panorama requires a direct internet connection for scheduling Supported Updates on firewalls and Log Collectors. Otherwise, you can perform only on-demand updates. (To schedule Antivirus, WildFire, or BrightCloud URL updates for Log Collectors, they must run Panorama 7.0.3 or a later release.) Each firewall or Log Collector receiving an update generates a log to indicate that the installation succeeded (Config log) or failed (System log). To schedule updates on the Panorama management server, see Install Updates for Panorama with an Internet Connection.
Before deploying updates, see Panorama, Log Collector, and Firewall Version Compatibility for important details about content release version compatibility. Refer to the Release Notes for the minimum content release version you must install for a Panorama release. Panorama can download only one update at a time for updates of the same type; stagger the updates to ensure they succeed. If you schedule multiple updates of the same type to download during the same time interval, only the first download will succeed. If your firewalls connect directly to the Palo Alto Networks Update Server, you can also use Panorama templates ( Device > Dynamic Updates) to push content update schedules to the firewalls. If you want to delay the installation of updates for a period after they are released, you must deploy schedules using templates. In rare instances, a content update will have errors so specifying a delay increases the likelihood that Palo Alto Networks will identify and remove such updates from the Update Server before firewalls install them.
Perform the following steps for each update type you want to schedule.
Schedule a Content Update Using Panorama
Select Panorama > Device Deployment > Dynamic Updates, click Schedules, and Add a schedule.
Specify a Name (to identify the schedule), the update Type, and the update frequency ( Recurrence). The frequency options depend on the update Type. PAN-OS software uses the Panorama timezone for update scheduling. If you set the Type to App and Threat, Log Collectors install and need only the Applications content, not the Threats content. Firewalls use both Applications and Threats content. For details, see Panorama, Log Collector, and Firewall Version Compatibility. The WildFire Private ( WF-Private) type is available only if you set the WildFire Private Cloud field ( Panorama > Setup > WildFire) to a WF-500 appliance, not to the WildFire cloud.
Select one of the following schedule actions and then select the firewalls or Log Collectors: Download And Install ( Best Practice )—Select Devices (firewalls) or Log Collectors. Download Only —Panorama downloads the update but does not install it.
Click OK and Commit, for the Commit Type select Panorama, and click Commit again.

Recommended For You