©
Palo
Alto
Networks,
Inc.
Panorama
6.1
Administrator’s
Guide
•
157
Manage
Licenses
and
Updates
Deploy
Updates
to
Devices
Using
Panorama
Step
3
Determine
the
software
upgrade
path.
Required
for
PAN
‐
OS
software
updates.
Select
Panorama > Managed Devices
,
and
note
the
current
Software
Version
for
the
firewalls
you
will
upgrade.
You
cannot
skip
any
major
PAN
‐
OS
release
versions
on
the
path
between
the
current
version
and
the
target
version.
For
example,
to
upgrade
firewalls
from
PAN
‐
OS
5.0.11
to
PAN
‐
OS
6.1.3:
1.
Upload
and
install
PAN
‐
OS
5.1.0
and
reboot.
2.
Upload
and
install
PAN
‐
OS
6.0.0
and
reboot.
3.
Upload
PAN
‐
OS
6.1.0.
Optionally,
install
this
base
image
and
reboot
before
you
install
the
target
maintenance
release.
4.
Upload
and
install
PAN
‐
OS
6.1.3
and
reboot.
Step
4
Download
the
updates
to
a
host
that
has
Internet
access.
Panorama
must
have
access
to
the
host.
1.
Use
a
host
with
Internet
access
to
log
in
to
the
2.
Download
content
updates:
a.
Click
Dynamic Updates
in
the
Resources
section.
b.
Download
the
desired
content
update
and
save
the
file
to
the
host.
Perform
this
step
for
each
content
type
you
will
update.
3.
Download
software
updates:
a.
Return
to
the
main
page
of
the
Palo
Alto
Networks
Customer
Support
web
site
and
click
Software Updates
in
the
Resources
section.
b.
Review
the
Download
column
to
determine
the
version
to
install.
The
filename
of
the
update
package
indicates
the
platform.
c.
Click
the
filename
and
save
the
file
to
the
host.
Step
5
Install
content
updates.
You
must
install
content
updates
before
software
updates.
To
see
the
minimum
content
release
version
you
must
install
for
a
PAN
‐
OS
release,
refer
to
the
.
Install
the
Applications
or
Applications
and
Threats
update
first,
and
then
install
any
other
updates
(Antivirus,
WildFire,
or
URL
Filtering)
one
at
a
time
in
any
sequence.
1.
Select
Panorama > Device Deployment > Dynamic Updates
.
2.
C
lick
Upload
,
select
the
update
Type
,
Browse
to
the
update
file,
and
click
OK
.
3.
Click
Install From File
.
4.
Select
the
update
Type
and
select
the
File Name
of
the
content
update
you
just
uploaded.
5.
Select
the
firewalls
on
which
to
install
the
update.
6.
Click
OK
to
start
the
installation.
Step
6
Activate
a
GlobalProtect
agent/app
software
update
on
firewalls.
You
activate
the
update
on
firewalls
so
that
users
can
download
it
to
their
client
systems.
1.
Select
Panorama > Device Deployment > GlobalProtect
Client
.
2.
C
lick
Upload
,
Browse
to
the
update
file,
and
click
OK
.
3.
Click
Activate From File
.
4.
Select
the
File Name
of
the
GlobalProtect
agent/app
update
you
just
uploaded.
5.
Select
the
firewalls
on
which
to
install
the
update.
6.
Click
OK
to
start
the
installation.
Deploy
an
Update
to
Firewalls
when
Panorama
is
not
Internet
‐
connected
(Continued)
