Schedule a Content Update Using Panorama
Panorama™ requires a direct internet connection for scheduling Supported Updates on firewalls, Log Collectors, and WildFire® appliances and appliance clusters. Otherwise, you can perform only on-demand updates. (To schedule Antivirus, WildFire, or BrightCloud URL updates for Log Collectors, the Log Collectors must be running Panorama 7.0.3 or a later release.) Each firewall, Log Collector, or WildFire appliance or appliance cluster receiving an update generates a log to indicate that the installation succeeded (a Config log) or failed (a System log). To schedule updates on the Panorama management server, see Install Updates for Panorama with an Internet Connection.
Before deploying updates, see Panorama, Log Collector, Firewall, and WildFire Version Compatibility for important details about content release version compatibility. Refer to the Release Notes for the minimum content release version you must install for a Panorama release.
Panorama can download only one update at a time for updates of the same type so if you schedule multiple updates of the same type to download during the same time interval, only the first download will succeed. To ensure that multiple updates of the same type succeed, stagger the updates.
If your firewalls connect directly to the Palo Alto Networks® Update Server, you can also use Panorama templates (DeviceDynamic Updates) to push content update schedules to the firewalls. If you want to delay the installation of updates for a period after they are released, you must deploy schedules using templates. In rare instances, a content update includes errors; specifying a delay increases the likelihood that Palo Alto Networks will identify and remove such an update from the Update Server before your firewalls install it.
Perform the following steps for each update type you want to schedule.
- Select PanoramaDevice DeploymentDynamic Updates, click Schedules, and Add a schedule.
- Specify a Name (to identify the
schedule), the update Type, and the update
frequency (Recurrence). The frequency options
depend on the update Type.PAN-OS® uses the Panorama timezone for update scheduling.If you set the Type to App and Threat, Log Collectors install and need only the Applications content, not the Threats content. Firewalls use both Applications and Threats content. For details, see Panorama, Log Collector, Firewall, and WildFire Version Compatibility.
- Select one of the following schedule actions and then
select the firewalls or Log Collectors:
- Download And Install (Best Practice)—Select Devices (firewalls), Log Collectors, or WildFire Appliances and Clusters.
- Download Only—Panorama downloads the update but does not install it.
- Click OK.
- Select CommitCommit to Panorama and then Commit your changes.
Deploy Upgrades to Firewalls, Log Collectors, and WildFire Appliances Using Panorama
Use Panorama™ to test software and content updates on a subset of firewalls and Dedicated Log Collectors before you deploy to all your firewalls and ...
Install Updates for Panorama with an Internet Connection
Install Updates for Panorama with an Internet Connection If Panorama™ has a direct connection to the internet, perform the following steps to install Panorama software ...
Upgrade Log Collectors When Panorama Is Not Internet-Connec...
Upgrade Log Collector software to PAN-OS® 8.1 and install content updates using Panorama™ when Panorama is not connected to the internet. ...
Upgrade Log Collectors When Panorama Is Internet-Connected
Upgrade Log Collector software to PAN-OS® 8.1 and install content updates using Panorama™ when Panorama is connected to the internet. ...
Schedule Dynamic Content Updates
Schedule Dynamic Content Updates Panorama > Device Deployment > Dynamic Updates To schedule an automatic download and installation of an update , click Schedules , ...
Manage Licenses and Updates
Use your Panorama™ management server to manage licenses, software updates, and content updates on firewalls and Dedicated Log Collectors. ...
Install Updates for Panorama When Not Internet-Connected
Install Updates for Panorama When Not Internet-Connected If Panorama™ does not have a direct connection to the internet, perform the following steps to install Panorama ...
Upgrade Firewalls When Panorama Is Not Internet-Connected
Upgrade firewall software to PAN-OS® 8.1 and install content updates using Panorama™ when Panorama is not connected to the internet. ...
Panorama > Device Deployment
Panorama > Device Deployment You can use Panorama to deploy software and content updates to multiple firewalls and Log Collectors and to manage firewall licenses. ...