Upgrade Process Using Panorama

plago — Wed, 02 Mar 2011 16:47:07 GMT

I have read all the upgrade documentation for PanOS 4.0.1 and its seems very clear on how to upgrade the units themselves. What I have not found is supported process for upgrading an environment that uses Panorama. We have Panorama and MANY 4000 series PA's running 3.1.5 code today. What would be the supported process/order for ugrading Panorama and the PA devices? Moreover, can I run 4.0.1 on Panorma and only some PA devices while other continue running 3.1.5 code?

Thanks,

Re: Upgrade Process Using Panorama

skrall — Wed, 02 Mar 2011 20:08:33 GMT

Easy one first.... Yes the 4.0 Panorama can manage older versions 3.1.x. There are some features in 4.0 that do not exist in 3.1 so these will be dropped when configuring a 3.1 system.

For Firewall Updates, you can continue to have the firewall poll the update servers and pull down content at regular intervals just like systems with no Panorama server. Or you can use Panorama as a central update server but this is a manual process. The Admin will use the console to look for software updates. Then you will select the updates (3.1.8 for 2000 Chassis), the you will select the devices from your list of managed devices and push the image to the selected firewalls. I believe you have the option to send the image only or to send and install.

Steve Krall

topic Upgrade Process Using Panorama in General Topics

Upgrade Process Using Panorama

Re: Upgrade Process Using Panorama