Palo Alto - Dynamic Updates

gpsriram — Sun, 04 Nov 2018 10:14:20 GMT

Hi !

I'm new to the Palo Alto Firewalls. I have query about the content updates for the PA Devices has TP licenses. We are pushing updates through Panorama.

Q1: I can install only one Active AV or threat updates to the firewall . Since this the new deployement , if i install with latest update is enough for us or we need to install all the updates from old to the new one.

Q2: We can't push the Apps updates to PA Devices . We were able to Push AV and Threat updates only. Has there any specific licnese require for the Apps updates.

Thanks in Advance.....

Re: Palo Alto - Dynamic Updates

LukeBullimore — Sun, 04 Nov 2018 23:34:12 GMT

Hey @gpsriram

Q1 - You do not need to install each and every content update between X and Y, only the latest needs to be installed on the box. However, the updates should be set to a schedule so that a new content update is installed every hour or so.

Q2- The apps dynamic update requires a valid support subscription, and should be included in the same package as the threat updates, being called "Applications and Threats"

If the firewalls don't have a valid support subscription, they will only be able to update the Threats content and not the Apps. If they do have a valid support subscription, did you try refreshing the license information from Panorama?

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/manage-licenses-and-updates/manage-licenses-on-firewalls-using-panorama

See "Update the license status of firewalls."

topic Palo Alto - Dynamic Updates in General Topics

Palo Alto - Dynamic Updates

Re: Palo Alto - Dynamic Updates