topic Re: VM-Series maintenance in Azure VMSS in VM-Series in the Public Cloud

VM-Series maintenance in Azure VMSS

FatihT — Tue, 03 May 2022 12:03:16 GMT

Hello

Is there a way to upgrade existing VM-Series in Azure VMSS? What is the process?

Regards

Re: VM-Series maintenance in Azure VMSS

sthornton — Wed, 04 May 2022 15:37:02 GMT

Hi Fatih. Yes, it's possible to upgrade the VM-Series in a VMSS. You will need to update the template that builds the FW/VM-Series for your scale out events. Once that is updated, you can remove one old FW at a time and let the template build out the new. If you don't update the template, your old version of PAN-OS would get deployed on the next scale out event.

Re: VM-Series maintenance in Azure VMSS

FatihT — Thu, 05 May 2022 09:41:47 GMT

Hello @sthornton

Thanks for feedback. I forgot to mention that the deployment is done through Panorama Orchestration.

So, if I change the version on the deployment configuration on Panorama,

this will relaunch again the whole deployment?
or change only the VM-series?
- if so, it will do for every VM-series at the same time? --> which will cause traffic interruption for a long time ...
or should I remove the VM-series one by one in Azure in order to have a new one with the target version as you indicated?

I'll test it in my lab environment. If you have information during this time, I'lll be glad 🙂

Fatih

Re: VM-Series maintenance in Azure VMSS

FatihT — Thu, 05 May 2022 16:56:56 GMT

Hello @sthornton

Tried to make the update from Panorama by changing the version in Azure plugin deployment settings.

Failed with the error below: