Upgrade a Cluster Locally with an Internet Connection
To upgrade a cluster locally, you must individually
upgrade each WildFire appliance enrolled in a cluster. When an appliance
finishes upgrading, it automatically re-enrolls into the cluster
that it was originally assigned to.
Temporarily suspend sample analysis.
Stop firewalls from forwarding any new samples
to the WildFire appliance.
Log in to the firewall web interface.
Device > Setup > WildFire
WildFire Private Cloud
Confirm that analysis for samples the firewalls already
submitted to the appliance is complete:
show wildfire latest samples
If you do not want to wait for the WildFire appliance
to finish analyzing recently-submitted samples, you can continue
to the next step. However, consider that the WildFire appliance then
drops pending samples from the analysis queue.
Install the latest WildFire appliance content update.
These updates equip the appliance with the latest threat
information to accurately detect malware.
request wf-content upgrade install version latest
Verify that the WildFire appliance software version you
want to install is available
request system software check
Download the PAN-OS 8.1 software version to the WildFire
You cannot skip any major release version when upgrading
the WildFire appliance. For example, if you want to upgrade from
PAN-OS 6.1 to PAN-OS 7.1, you must first download and install PAN-OS
Download the 8.1 software version.
request system software download version 8.1.0
To check the status of the download, use the following
show jobs all
Confirm that all services are running.
show system software status
Install the 8.1 software version.
request system software install version 8.1.0
Complete the software upgrade.
Confirm that the upgrade is complete. Run
the following command and look for the job type
show jobs all
Enqueued Dequeued ID Type Status Result Completed
14:53:15 14:53:15 5 Install FIN OK 14:53:19
Gracefully restart the appliance:
request cluster reboot-local-node
upgrade process could take 10 minutes or over an hour, depending
on the number of samples stored on the WildFire appliance.
Repeat steps 1-7 for each WildFire worker node in the
(Optional) View the status of the reboot tasks on the
WildFire controller node.
On the WildFire cluster controller, run the following command
and look for the job type
show cluster task pending
Check that the WildFire appliance is ready to resume