topic Pre-load software in Panorama Discussions

Pre-load software

ellisbw — Thu, 20 Jan 2022 19:45:02 GMT

Hello!

I have a couple hundred firewalls that we centrally manage through Panorama. I am needing to update these firewalls to 10.1.1 outside of business hours, and that's going to take time.

In my testing I had tried to send the software package to a lab firewall through Panorama, telling it NOT to install the software. However, when I went back to install through Panorama it copied the software package file again.

Is there a way to pre-load the software packages and then have Panorama initiate an install without sending the entire package again?

Thanks!

Re: Pre-load software

PavelK — Fri, 21 Jan 2022 01:10:13 GMT

Thank you for the post @ellisbw

The feature in Panorama: "Upload only to device (do not install)" is in place to upload an image that is available on local device to be installed locally from "Install From File": https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm47CAC

What you are seeing in your Lab setup is therefore expected. As of now, I can't think of a way to pre-upload it by Panorama and initiate an installation from Panorama for already pre-uploaded image. If you are concern about bandwidth, perhaps you can split installation into several batches.

Kind Regards

Pavel

Re: Pre-load software

JGriessmeier — Fri, 21 Jan 2022 08:41:57 GMT

Hi,

if you are familiar with Ansible you could try the official paloaltonetworks panos collection at ansible galaxy.

https://galaxy.ansible.com/paloaltonetworks/panos

there is a module called panos_software that is meant for managing software versions.

Greetings

Re: Pre-load software

jjosephs — Wed, 11 Sep 2024 18:10:08 GMT

In Panorama > Device Deployment > Software, if one selects Validate, then the software images are transferred, but not installed.

One can then log in directly to the firewall to install and reboot