topic Re: Schedule Firmware Update via Panorama or Schedule NGFW Reboot via Panorama in Panorama Discussions

Schedule Firmware Update via Panorama or Schedule NGFW Reboot via Panorama

Sean.Larosa — Tue, 02 Apr 2024 20:26:45 GMT

Title says it all.

Need to patch 16 NGFWs in geographically disparate locations.

I see that I can schedule config changes and exports

I see that I can push firmware in 3 ways: download, download+install, download+install+reboot. I do not see any way to schedule this.

I also don't see that I can schedule a reboot alone were I to perform firmware download+install ahead of time.

Am I missing something here?

Re: Schedule Firmware Update via Panorama or Schedule NGFW Reboot via Panorama

Claw4609 — Tue, 02 Apr 2024 20:37:40 GMT

Hello,

I don't believe you are able to schedule reboots of the PA appliances, to achieve something like this you would need to do this via a scrip accessing the API.

But if you're updating all your firewalls is this something you would want to have scheduled and go on its own, as opposed to confirming the firewalls update successfully yourself during a maintenance window?

API port to reference: Automating the Palo Alto NGFW's Process/Deamon Restarts | Palo Alto Networks

Re: Schedule Firmware Update via Panorama or Schedule NGFW Reboot via Panorama

Sean.Larosa — Tue, 02 Apr 2024 20:41:51 GMT

Yes, I would like very much to be able to schedule the reboots w/out babysitting the devices in real time.

I have 3rd party ICMP and HTTP monitoring that will alert me on the down up, as well as raise alarms if they are down for to long of a period of time.

Other vendors allow for a future reboot via CLI I am a little bummed that I have to break out Powershell and Task Scheduler to call an API Endpoint to accomplish this.

Thank you for confirming my suspicions.