Deploy Updates to Firewalls, Log Collectors, and WildFire
Appliances Using Panorama
Use Panorama™ to test software and content updates on
a subset of firewalls and Dedicated Log Collectors before you deploy
to all your firewalls and appliances.
You can use Panorama™ to qualify software and content updates
by deploying them to a subset of firewalls, Dedicated Log Collectors,
or WildFire® appliances and appliance clusters before installing
the updates on the rest of your managed appliances. If you want
to schedule periodic content updates, Panorama requires a direct
Internet connection. To deploy software or content updates on demand
(unscheduled), the procedure differs based on whether Panorama is
connected to the internet. Panorama displays a warning if you manually
deploy a content update when a scheduled update process has started
or will start within five minutes.
When deploying updates, Panorama notifies the managed appliances (firewalls,
Log Collectors, and WildFire appliances) that updates are available and
the appliances then retrieve the update packages from Panorama.
By default, managed appliances retrieve updates over the management
(MGT) interface on Panorama. However, if you want to reduce the
traffic load on the MGT interface by using another interface for
appliances to retrieve updates, you can Configure
Panorama to Use Multiple Interfaces.
By default, you can download up to two software or content updates
of each type to Panorama. When you start any download beyond that maximum,
Panorama deletes the oldest update of the selected type. To change
the maximum, see Manage
Panorama Storage for Software and Content Updates.