VM-Series maintenance in Azure VMSS

[FatihT]

Hello

Is there a way to upgrade existing VM-Series in Azure VMSS? What is the process?

Regards

[sthornton]

Hi Fatih.  Yes, it's possible to upgrade the VM-Series in a VMSS.  You will need to update the template that builds the FW/VM-Series for your scale out events.  Once that is updated, you can remove one old FW at a time and let the template build out the new.  If you don't update the template, your old version of PAN-OS would get deployed on the next scale out event.

[FatihT]

Hello @sthornton 

Thanks for feedback. I forgot to mention that the deployment is done through Panorama Orchestration.

So, if I change the version on the deployment configuration on Panorama,

• this will relaunch again the whole deployment?
• or change only the VM-series?
  • if so, it will do for every VM-series at the same time? --> which will cause traffic interruption for a long time ...
• or should I remove the VM-series one by one in Azure in order to have a new one with the target version as you indicated?

I'll test it in my lab environment. If you have information during this time, I'lll be glad 🙂

Fatih

[FatihT]

Hello @sthornton 

Tried to make the update from Panorama by changing the version in Azure plugin deployment settings.

Failed with the error below: