Pre-load software

[ellisbw]

Hello!

I have a couple hundred firewalls that we centrally manage through Panorama. I am needing to update these firewalls to 10.1.1 outside of business hours, and that's going to take time.

In my testing I had tried to send the software package to a lab firewall through Panorama, telling it NOT to install the software. However, when I went back to install through Panorama it copied the software package file again.

Is there a way to pre-load the software packages and then have Panorama initiate an install without sending the entire package again?

Thanks!

[PavelK]

Thank you for the post @ellisbw

The feature in Panorama: "Upload only to device (do not install)" is in place to upload an image that is available on local device to be installed locally from "Install From File": https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm47CAC

What you are seeing in your Lab setup is therefore expected. As of now, I can't think of a way to pre-upload it by Panorama and initiate an installation from Panorama for already pre-uploaded image. If you are concern about bandwidth, perhaps you can split installation into several batches.

Kind Regards

Pavel

[JGriessmeier]

Hi,

if you are familiar with Ansible you could try the official paloaltonetworks panos collection at ansible galaxy.

https://galaxy.ansible.com/paloaltonetworks/panos 

there is a module called panos_software that is meant for managing software versions.

Greetings

[jjosephs]

In Panorama > Device Deployment > Software, if one selects Validate, then the software images are transferred, but not installed.

One can then log in directly to the firewall to install and reboot