Monitor Staged Upgrades Rollouts of Prisma Access Agents
You can monitor the staged upgrade rollouts of the Prisma Access Agent from the
Inventory page.
Where Can I Use This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
NGFW (Managed by Panorama)
Check the prerequisites for the deployment you're
using
macOS 14 and later or Windows 10 version 2024 and later
desktop devices
Contact your Palo Alto Networks account representative to
activate the Prisma Access Agent feature
Prisma Access Agent upgrades are grouped into upgrade rings that are rolled out
to endpoints according to the staged rollouts that
you configured on the
Access Agent Setup page for the Prisma Access Agent.
To monitor the progress of the staged rollouts, select ManagePrisma Access Agent.
If no new agents have been published by Palo Alto Networks
or no upgrades are running, the window might look like this:
If you are notified of an upcoming agent upgrade and an active staged rollout is
still in progress, you must stop the rollout before the new
upgrade can be published by Palo Alto Networks.
In the Agent Upgrade Progress section, you can see the latest
Agent Version that has been rolled out to your endpoints,
and the total number of agents that have completed, failed, or pending upgrades. The
completed status indicates that an agent is running the latest level of the agent
shown in the Agent Version field.
After you onboard a new device, the Prisma Access Agent will get upgraded during a staged rollout according to the ring that the device
belongs to. If a new device was added to a ring after a staged rollout has completed
for that ring, the device will be updated as part of the default ring. The next time
a staged rollout occurs, that device will be upgraded according to its original ring
membership.
To view the details about the agent upgrades in the upgrade rings, select
View Ring Details. Expand each ring section to show the
number of devices in the ring that have completed, failed, or pending upgrades. For
each category (Completed, Failed, or Pending), the sum of the numbers in each ring
should equal the total number in the respective category in the Total Agent Upgrade
Progress section.
If you need to upgrade the agent on individual
devices outside of the ring upgrades, select the devices in the
Devices table and select ActionsUpgrade Agent.
