Wednesday 7 February 2024

palo alto software upgrade

Backup config 

Device > Setup > Operations > export 


Download the software and sync to HA peer

Device > Software > Check now

You can jump with in a major release like 10.2.10 to 10.2.10-h3

If you need to go up a few versions you need to go

10.2.5 > 10.2.10 > 11.0 > 11.5


Go onto the standby and install the update

Let that install and reboot

reboot can take 15 minutes

You may see an error on primary that config is not sync'd you can ignore


Disable HA on primary to let the secondary take over

Device > High Availability > Suspend local device for high availability


Install update and reboot on primary

When it comes back up re-enable HA

No comments:

Post a Comment