>
    Strata Copilot
    Upgrade ZTNA Connectors
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access ZTNA Connector
    5. Configure ZTNA Connector
    6. Upgrade ZTNA Connectors
    Download PDF
    Prisma Access

    Upgrade ZTNA Connectors

    Table of Contents

    Upgrade ZTNA Connectors

    How to upgrade the software version of ZTNA connectors.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • We require a minimum version of Prisma Access 5.0 to enable ZTNA Connector support.
    • Prisma Access license includes 10 connectors, 20,000 FQDNs, and 1024 IP subnets. This functionality is provided for the purpose of trying out ZTNA Connectors in your environment.
    • The Private App add-on license includes 200 ZTNA Connectors, 20,000 FQDNs, and 1024 IP subnet functionality.
    To keep the ZTNA Connectors up-to-date, you can update their software version. You also might be required to upgrade your connectors to support a new feature or functionality.
    When a new ZTNA Connector version is released, the connectors in your deployment are checked and, if the released version is newer than the existing version, or if all connectors in the group are not on the same version, icons in the Connector Group area shows that an update is available. If you choose to update the connectors, you are given an option to upgrade the entire group together. Upgrading a group automatically upgrades all connectors in that group in paralell. You cannot upgrade individual connectors.
    A ZTNA Connector takes approximately 8 to 10 minutes to upgrade and the connector is rebooted during this process. Palo Alto Networks recommends that you schedule a connector upgrade during a down time or a scheduled network outage.
    1. Go to ZTNA ConnectorConnector Groups. Green arrows indicate that an upgrade is available.
      You can only upgrade to the latest image version that is available for the tenant.
    2. Click the green arrow next to the connector group.
    3. Select Install Now to upgrade the connector group now, or Schedule and provide a time and date for the upgrade. The time displayed is the local time zone for the admin using the ZTNA UI.
      You can Cancel Scheduled Upgrade up to five minutes before it begins.
    4. Check the status of the connectors by viewing the icon under Connector Version.
      IconDescription
      		Upgrade is available.
      		Upgrade is scheduled.
      		Upgrade has started and is in progress.
      No Icon (Only Connector version is displayed)
      		Upgrade was successful.
      		Not all of the connectors were upgraded.
      		Upgrade failed.

    © 2025 Palo Alto Networks, Inc. All rights reserved.