Hi @J_Healy ,
Like you I use Panorama to upgrade my NGFWs because it saves me from having to download and install on each one. I still log in to each one to suspend and make functional because I make sure the standby is in a passive state before I fail over. In the long run, it would be good for Panorama to do it all with one click.
Upgrade HA Pair button:
- Upgrade passive.
- Wait and verify passive is ready for failover.
- Suspend active and upgrade.
- Verify all HA checks passed.
You could even have it make the original one active again.
It is interesting that you can suspend the NGFW with SCM.
Thanks,
Tom
Help the community: Like helpful comments and mark solutions.
