>
    Strata Copilot
    Upgrade ION Devices in HA Configuration
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Branch High Availability
    5. Upgrade ION Devices in HA Configuration
    Download PDF
    Prisma SD-WAN

    Upgrade ION Devices in HA Configuration

    Table of Contents

    Upgrade ION Devices in HA Configuration

    Learn how to upgrade ION devices in a HA Configuration.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    To upgrade a Prisma SD-WAN High Availability (HA) pair, upgrade the backup device first. Once the upgrade is complete, switch the upgraded device to be the active device. Monitor your network traffic to ensure everything is working correctly. After you've confirmed the new active device is stable, you can then upgrade the original active device, which is now the backup. Finally, switch the device back to its original active role.
    Use the following steps to upgrade an ION device in HA configuration to avoid downtime:
    1. Upgrade the backup ION device.
      1. Log in to the Prisma SD-WAN portal or Strata Cloud Manager.
      2. Navigate to ConfigurationPrisma SD-WANION DevicesClaimed Devices.
      3. Select the ION device you wish to upgrade.
      4. From the ellipsis menu, select Schedule Software Upgrade.
      5. Choose the Upgrade Type (either Upgrade to upgrade the software or Download only to download the image).
      6. Select the desired Software Version for the upgrade.
      7. Choose the Schedule Type (either immediately or custom for a later time).
      8. (Optional) Configure Max Download Time and Max Upgrade Time (default is 30 minutes).
      9. (Optional) Select specific interfaces for the software download.
      10. Select Schedule to continue.
      11. After the upgrade is complete, verify that the device is running the new software version.
    2. Switch the backup ION device to active mode.
      1. Navigate to ConfigurationPrisma SD-WANION Devices Claimed Devices.
      2. On the Basic Info tab, in the Redundancy section, modify the backup ION device priority to assign a higher priority value and ensure preemption is enabled.
        The ION device with the higher priority assumes the active role. It is recommended to maintain a minimum difference of 40 between the priorities of the active and backup devices.
      3. Verify that all the tunnels are up and traffic through the newly active ION device is working correctly.
    3. Upgrade the active ION device.
      1. Navigate to ConfigurationPrisma SD-WANION Devices Claimed Devices.
      2. Select the active device and upgrade to the required software by referring to step 1.
      3. After the upgrade is complete, verify the software version on the device.
    4. Switch the priority of the active ION device.
      1. Navigate to ConfigurationPrisma SD-WANION Devices Claimed Devices.
      2. On the Basic Info tab, in the Redundancy section, change the active ION device priority to a higher value and ensure preemption is enabled.
        The ION device with the higher priority will assume the active role.
      3. Verify that all the tunnels are up and traffic through the newly active ION device is working correctly.

    © 2026 Palo Alto Networks, Inc. All rights reserved.