Panorama Pan OS Automatic Update to Managed Firewall Devices

CarloMun — Thu, 02 May 2019 19:36:38 GMT

Hi,

I currently manage a group of Palo Alto FW Devices (5220, 800, 3200 and 200 series) via a Panorama M-100 Series Appliance.

I would like to know if Panorama pushes automatically PAN OS SW Update (at the PAN OS - level only - not AV, AppID or Wildfire signatures) to the managed devices (after having them downloaded from the internet, hence assuming a working Internet connectivity) and, if this is the case, how this behaviour can be changed/configured.

I have searched through the Panorama Admin Guide for this specific topic, but couldn't find a clear answer. Any reference to technical documentation would also be appreciated.

Thanks,

Re: Panorama Pan OS Automatic Update to Managed Firewall Devices

jeremy.larsen — Thu, 02 May 2019 20:46:53 GMT

Not automatically. You must download the specific versions you need to Panorama and then you can deploy en-mass from there. You can also do version jumps like 8.0.13 -> 8.1.7 if you pre-download the required intermediary (8.1.0). Do you need a screenshot?

You can find it in the Panorama interface here -

Panorama > Device Deployment > Software > Download/Install

topic Panorama Pan OS Automatic Update to Managed Firewall Devices in General Topics

Panorama Pan OS Automatic Update to Managed Firewall Devices

Re: Panorama Pan OS Automatic Update to Managed Firewall Devices