Hello @J.Healy
thanks for posting.
To my knowledge there is no way to trigger Firewall failover directly from Panorama. I think the technical reason for this is Panorama is primarily designed for central configuration and log management and not direct real time operations.
In the past when I was doing Firewall upgrades, I had exactly the same question as you. Having Firewall failover capability directly from Panorama was feature I was missing. I eventually limited Panorama triggered upgrades only for stand alone Firewalls. HA pairs, I used to upgrade directly from Firewalls.
Kind Regards
Pavel
Help the community: Like helpful comments and mark solutions.