Palo Alto - Dynamic Updates

Reply
Highlighted
L1 Bithead

Palo Alto - Dynamic Updates

Hi !

 

I'm new to the Palo Alto Firewalls. I have query about the content updates for the PA Devices has TP licenses. We are pushing updates through Panorama.

 

Q1: I can install only  one Active AV or threat updates to the firewall . Since this the new deployement , if i install with latest update is enough for us or we need to install all the updates from old to the new one. 

 

Q2: We can't push the Apps updates to PA Devices . We were able to Push AV and Threat updates only. Has there any specific licnese require for the Apps updates.

 

Thanks in Advance.....


Accepted Solutions
Highlighted
L5 Sessionator

Hey @gpsriram

 

Q1 - You do not need to install each and every content update between X and Y, only the latest needs to be installed on the box. However, the updates should be set to a schedule so that a new content update is installed every hour or so.

 

Q2- The apps dynamic update requires a valid support subscription, and should be included in the same package as the threat updates, being called "Applications and Threats"

 

If the firewalls don't have a valid support subscription, they will only be able to update the Threats content and not the Apps. If they do have a valid support subscription, did you try refreshing the license information from Panorama?

 

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/manage-licenses-and-u...

 

See "Update the license status of firewalls."

View solution in original post


All Replies
Highlighted
L5 Sessionator

Hey @gpsriram

 

Q1 - You do not need to install each and every content update between X and Y, only the latest needs to be installed on the box. However, the updates should be set to a schedule so that a new content update is installed every hour or so.

 

Q2- The apps dynamic update requires a valid support subscription, and should be included in the same package as the threat updates, being called "Applications and Threats"

 

If the firewalls don't have a valid support subscription, they will only be able to update the Threats content and not the Apps. If they do have a valid support subscription, did you try refreshing the license information from Panorama?

 

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/manage-licenses-and-u...

 

See "Update the license status of firewalls."

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!