HA Upgrade Procedure Palo Alto
HA Upgrade Procedure
This section provides an overview of the PANOS system software and content upgrade procedures. Release notes should be consulted for detailed instructions.
PANOS System Software Upgrade Procedure
The following procedure should be followed for performing a PANOS upgrade of an HA pair.
1. Suspend passive device
2. Upgrade passive device to the new PANOS release
3. Make passive functional
4. Wait for state synchronization to complete
5. Suspend active device which will force the passive to become active
6. Follow steps 2 and 3 to upgrade previously active device
7. If pre‐emptive is configured, the currently passive device will revert to active once state synchronization is complete.
Content Upgrade Procedure
Both the active and passive devices must be upgraded individually with content updates, which provide new application and threat definitions. Installation of these updates is not service affecting and can be performed directly on a device while it is in the active or passive state.