Install Updates for Panorama in an HA Configuration
To ensure a seamless failover when you update
the Panorama software in a high availability (HA) configuration,
the active and passive Panorama peers must be running the same Panorama
release with the same Applications database version. The following
example describes how to upgrade an HA pair (active peer is Primary_A
and passive peer is Secondary_B).
Before updating Panorama,
refer to the Release Notes. for the
minimum content release version required for PAN-OS 9.0.
M-100 appliances, Palo Alto Networks requires upgrading the memory
to 32GB or more for management and log collection tasks. See the M-100 Memory Upgrade Guide before
upgrading your M-100 appliance to PAN-OS 9.0.0.
Upgrade the Panorama software on the Secondary_B
Perform one of the following tasks on the Secondary_B peer:
you reboot, the Primary_A peer is initially still in the passive
state. Then, if preemption is enabled (default), the Primary_A peer
automatically transitions to the active state and the Secondary_B
peer reverts to the passive state.