Focus

Prisma AIRS

Upgrade using Panorama

Table of Contents

Upgrade using Panorama

Upgrade Prisma AIRS AI Runtime: Network intercept using Panorama.

Where Can I Use This?	What Do I Need?
Upgrade Prisma AIRS: Network intercept	Create Prisma AIRS AI Runtime: Network Intercept Deployment Profile for Panorama Panorama Software Version: 11.2.5 and above Prisma AIRSAI Runtime: Network intercept

Locally download and install the Prisma AIRS AI Runtime: Network intercept image with *.aingfw extension.

When the image is successfully downloaded, the Panorama web interface shows the filename version with *.aingfw extension and platform as "AI Runtime Security".

There is a known issue (PAN-288025) wherein Panorama can’t centrally manage the Prisma AIRS AI Runtime: Network intercept image.
You can download (Panorama > Device Deployment > Software and Check Now) a Panorama managed Prisma AIRS AI Runtime: Network intercept from the Customer Support portal with the *.aingfw extension; however, you can't manage it through Panorama. This is because, the device group and template don’t connect when installing the image.
Workaround: Download the image and manually deploy it on the firewall directly with the web interface or PAN-OS CLI commands.
On standalone AIRS firewalls running PAN-OS 11.2.11/12.1.6 or earlier, two images with different SHA-256 checksums may appear for the same PAN-OS version — one for the regular (x86) platform and one for the ARM platform. If you download the wrong platform image, the installation will fail with a "wrong platform (vmarm)" error. Cancel the download, select the other image for the same version, and retry. This issue is resolved in PAN-OS 11.2.12 and 12.1.7 (PAN-317773)