panorama in management only mode

[zaidshaikh]

we have a panorama pair in ha (vm), in management only mode. Having 3 pairs of managed firewalls wherein only configuration push is being applied. Dynamic updates for each pair of Fws is being applied manually since it is an air-gap infra (no-internet).

Now, i see the panoramas were never updated with content updates, since the active one is having a different version than the passive panorama.

Since, i have to take care the infra, what shall be the steps to make it both equal?

Secondly, it is necessary/mandatory to have the panoramas updated to the same versions as that of firewalls, i assume that since it is only for config push, it wont be required.

Please guide.

[PavelK]

Hello @zaidshaikh

thanks for post!

Panorama has 3 different types of dynamic updates. The details are described in this KB: What are the different Dynamic Updates configurations in Panorama?.

To resolve the issue with Panorama itself being behind with latest content updates, configure the option No.1.

To resolve the issue where air gapped Firewalls do not have access to download content updates, configure the option No.3. If your Firewalls do not have latest content update installed you might eventually run into an issue that configuration push might fail because of missing application or application dependency.

Ideally, you should keep both Panorama and Firewalls up to date with latest content updates.

Kind Regards

Pavel 

[zaidshaikh]

Thanks @PavelK ,

the firewalls are upto date with latest updates, however, the panorama is having old updates.

Secondly, if i were to fix the issue with respect to commit fail due to application-status-- huggingface is a invalid reference showing in commit failure details, how i can fix this.

Later on i will schedule the panorama updates.

[zaidshaikh]

Hi,

Also i need some clarity with respect to panorama APP and Threats update image to be downloaded from PA portal.

in Panorama Dynamic updates the file to be uploaded should be which one "panupv2-all-apps-8843-XXXX OR "panupv2-all-contents-8839-XXXX

Just want to know which one to download and upload in Panorama.