06-02-2026 05:17 AM
Hi everyone,
I am trying to get more information on upgrade the PAN-OS software via SCM. I know how to configure and run it using the Groups and Schedules found under software updates page, but I was wondering about the specifics I cannot find in the documentation.
I am hoping anyone here can answer my questions.
1. When creating a schedule that has to install, say at 13:00. In the schedule overview, it gives a time of 13:00 - 15:00 (Window of two hours.) Is this the window it might that it installs the update between, or is it start at 13:00 and try until 15:00 incase of failures?
2. When you open a running schedule, it defines some steps and checks it does. What do those steps do exactly, besides from the obvious ones? Specifically the PRE-CHECK and POST-CHECK step.
3. How does updating an HA-pair work? Do I put them in the same group and schedule? Does it update the Passive unit first, reboots it and does the checks before initiating a failover and updating the other unit? I cannot find it documented anywhere.
Thanks for taking your time reading this and possibly answer my questions.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
