Palo Alto Firewall Training | Updating HA Firewalls 

Thanks for watching! More videos coming soon!

Fantastic....simple and yet covers everything in detail

very clear and concise. Thank you so much. I am planning to upgrade our PROD PAN-OS from 9.1 to 10.1.10-h2. It's my first time and I don't have the confidence. Your video has helped a lot.

Good video. I used this same procedure recently to upgrade from 9.0.6 to 9.0.8 on an HA pair. I did one thing differently...after you disabled preemption, I then suspended the local firewall to force a failover. I wanted to ensure that worked fine before upgrading. If I had a problem, I would have opened a TAC case to fix it before proceeding. A bit cautious, but with 3,500 or so users on my network, cautious is good. I haven't yet upgraded to 9.1 because it's not a TAC recommended release. I am hoping they bless it soon, because there's features in there that I want.

Thank you! I needed to watch this because the documentation wasn't clear on which of the nodes to disable preemption. I now know that you disable it on the active/primary node. This way when you end up updating the primary, it will auto-failback to the primary after you enable preemption again and commit due to the election setting being a lower value. This video still applies all the way up to 10.2.x

Thank you, Man. Upgraded HA PA firewalls in production using this video. You rock :)

Hope you don't mind I'm using this as a refresher before I update mine! :) Thanks for doing it!

excellent video and simply explained.

Thank you for this wonderful video. We are about to upgrade Palo firewalls from 8.1.x to 9.1.1. Can you please advise on what should be the stepwise path of version upgrades? Do we need to go as below? 9.0.0 then to 9.1.0 and then to 9.1.1? Or can we skip the 9.0.0?

just perfect, awesome video all in one

Great video as usual.. Expecting more of such from you.. thanks

According to Palo alto documentations both of the firewalls should have same PAN-OS versions, so when we upgrade and reboot the secondary it will have a different version than primary active. So my question is how does the both firewalls syncthe connection tablee?

I have to look through your videos but what about in the event an update fails? this is my first time and i'm building the process, i am confident things will go well but i want to be able to plan. do we reflash an OS? or just by importing the configuration will it revert to the previously working version?

yes , its informative and useful.

Thanks

Hello do we need to run the command Request high-availability state functional in both PA or just in active PA only? thank you

Nice video.I am about to upgrade my PA 3220 from 9.0.9 to 10.0.5, can you advise on what should be the steps to follow.

👌👍

Hi, one question. I would like to upgrade Palo Alto cluster. I'm a bit caution, so I would like to upgrade one node and few days later the second node. It's possible? In case on mismach version of both nodes synchronization, HA, changes commits can work properly? Or is recommended to upgrade both nodes in the same maintenance window? Thanks

Hi, please I have a question.. Disable preemption must be in both firewalls? thks in advance

Could you make video on how to proceed with upgrade incase of less memory

How do you update a Palo Alto PA-5220 that is on an isolated (air-gapped) network?

Hola, justamente me tocan actualizar unos equipos, gracias por la información me queda más claro como va el asunto : 3 !!