Palo Alto - Dynamic Updates

[gpsriram]

Hi !

I'm new to the Palo Alto Firewalls. I have query about the content updates for the PA Devices has TP licenses. We are pushing updates through Panorama.

Q1: I can install only  one Active AV or threat updates to the firewall . Since this the new deployement , if i install with latest update is enough for us or we need to install all the updates from old to the new one. 

Q2: We can't push the Apps updates to PA Devices . We were able to Push AV and Threat updates only. Has there any specific licnese require for the Apps updates.

Thanks in Advance.....

[LukeBullimore · Accepted solution]

Hey @gpsriram

Q1 - You do not need to install each and every content update between X and Y, only the latest needs to be installed on the box. However, the updates should be set to a schedule so that a new content update is installed every hour or so.

Q2- The apps dynamic update requires a valid support subscription, and should be included in the same package as the threat updates, being called "Applications and Threats"

If the firewalls don't have a valid support subscription, they will only be able to update the Threats content and not the Apps. If they do have a valid support subscription, did you try refreshing the license information from Panorama?

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/manage-licenses-and-u...

See "Update the license status of firewalls."