This topic describes how to update an existing Palo Alto Networks VM-Series firewall device to the latest image available from Palo Alto Networks.
A newer version of the image (9.1.12-h3 or higher) published for Palo Alto Networks VM-Series Firewall device requires more memory resources. This section discusses step-by-step procedures to perform device image update along with memory upgrade.
You will receive an email indicating that a version update is required. Make a note of the parameters corresponding to your devices to identify the process that matches your devices.
As a part of this upgrade process, the PANW devices will be standardized in terms of memory and the number of interfaces supported.
| Device Type | Memory before upgrade | Memory after upgrade | Number of interfaces before upgrade | Number of interfaces after upgrade |
|---|---|---|---|---|
| 2 cores | 8 | 8 | 10, 19, 23 | 10 |
| 4 cores | 8 | 16 | 10, 19, 23 | 10, 19 |
| 8 cores | 16 | 48 | 10, 19, 23 | 10, 19 |
Use this table to determine which process you need to follow based on your device(s).
| Deployment Mode | Device Type | Memory | Number of Interfaces | Software Version | Process |
|---|---|---|---|---|---|
| Equinix-Configured | 2 cores | any memory | 19/23 | Any version | Process 1 |
| Equinix-Configured | 4 cores | any memory | 23 | Any version | Process 1 |
| Equinix-Configured | 8 cores | any memory | 23 | Any version | Process 1 |
| Equinix-Configured | 4 cores | 8 | 10, 19 | Any version | Process 2 |
| Equinix-Configured | 8 cores | 16 | 10, 19 | Any version | Process 2 |
| Equinix-Configured | 2 cores | 8 | 10 | < 9.1.12.h3 | Process 3 |
| Equinix-Configured | 4 cores | 16 | 10, 19 | < 9.1.12.h3 | Process 3 |
| Equinix-Configured | 8 cores | 48 | 10, 19 | < 9.1.12.h3 | Process 3 |
| Self-Configured | 2 cores | any memory | 19/23 | Any version | Process 4 |
| Self-Configured | 4 cores | any memory | 23 | Any version | Process 4 |
| Self-Configured | 8 cores | any memory | 23 | Any version | Process 4 |
| Self-Configured | 4 cores | 8 | 10, 19 | Any version | Process 5 |
| Self-Configured | 8 cores | 16 | 10, 19 | Any version | Process 5 |
| Self-Configured | 2 cores | 8 | 10 | < 9.1.12.h3 | Process 6 |
| Self-Configured | 4 cores | 16 | 10, 19 | < 9.1.12.h3 | Process 6 |
| Self-Configured | 8 cores | 48 | 10, 19 | < 9.1.12.h3 | Process 6 |
Process 1 – Equinix-Configured Devices Interface Correction and Memory Upgrade
-
If you have 2 core devices, you need to manually relocate connections from interfaces higher than 10 to interface 10 or lower. For 4 and 8 core devices, you need to manually relocate the connections from interfaces higher than 19 to interface 19 or lower.
-
Verify BGP sessions to CSPs and device links.
- Sign in to the Equinix Customer Portal and navigate to Network Edge.
-
From the Network Edge menu, select Virtual Device Inventory.
-
Click the device you want to upgrade. The device details will display with a message at the top indicating that the software version for the device requires an upgrade.
-
Click Open a Support Case.
-
In the Case Type drop-down menu, select PANW version/memory upgrade.
-
Include any specific instructions or details including the date and time for the upgrade activity. Once you have submitted this request, the Equinix Support Team will confirm the date and time prior to starting the process because this process will impact service.
-
Click Additional Information to make sure contact information is correct.
-
Click Submit.
Process 2 – Upgrade Equinix-Configured Devices
Upgrading Equinix-Configured devices requires a manual upgrade that will be done by the Equinix Support Team. This process will impact service. To start the upgrade process:
-
Sign in to the Equinix Customer Portal and navigate to Network Edge.
-
From the Network Edge menu, select Virtual Device Inventory.
-
Click the device you want to upgrade. The device details will display with a message at the top indicating that the software version for the device requires an upgrade.
-
Click Open a Support Case.
-
In the Case Type drop-down menu, select PANW version/memory upgrade.
-
Include any specific instructions or details including the date and time for the upgrade activity. Once you have submitted this request, the Equinix Support Team will confirm the date and time prior to starting the process because this process will impact service.
-
Click Additional Information to make sure contact information is correct.
-
Click Submit.
Process 3 – Equinix-Configured Devices Version Update
-
Sign in to the Equinix Customer Portal and navigate to Network Edge.
-
From the Network Edge menu, select Virtual Device Inventory.
-
Click the device you want to upgrade. The device details will display with a message at the top indicating that the software version for the device requires an upgrade.
-
Click Tools and select Version Control to compete the version update.
-
After the version update is complete, go to the device details and make sure your software version is now 9.1.12-h3.
-
Verify BGP sessions to CSPs and device links.
Process 4 – Self-Configured Devices Interface Correction
-
If you have 2 core devices, you need to manually relocate connections from interfaces higher than 10 to interface 10 or lower. For 4 and 8 core devices you need to manually relocate the connections from interfaces higher than 19 to interface 19 or lower.
-
Verify BGP sessions to CSPs and device links.
- Sign in to the Equinix Customer Portal and navigate to Network Edge.
-
From the Network Edge menu, select Virtual Device Inventory.
-
Click the device you want to upgrade. The device details will display with a message at the top indicating that the software version for the device requires an upgrade.
-
Click Open a Support Case.
-
In the Case Type drop-down menu, select PANW version/memory upgrade.
-
Include any specific instructions or details including the date and time for the upgrade activity. Once you have submitted this request, the Equinix Support Team will confirm the date and time prior to starting the process because this process will impact service.
-
Click Additional Information to make sure contact information is correct.
-
Click Submit.
-
After the interface correction process is complete, follow the Memory Upgrade process to complete the memory upgrade in the portal.
Process 5 – Self-Configured Devices Memory Upgrade and Version Update
You can upgrade your self-configured device in the Equinix Fabric portal. This upgrade process for self-configured devices has 5 key steps:
-
Save a configuration backup – Make sure to complete the configuration backup using CLI before performing any other steps.
-
Deactivate your license – The license for your device must be deactivated before upgrading the device.
-
Upgrade the memory – Use the Memory Upgrade tool described below to upgrade your device memory.
-
Activate your license – Re-activate your license to complete the memory upgrade process.
-
Update your software version – After the memory upgrade is complete, update your software version.
Memory Upgrade
-
Log in to the Equinix Fabric portal.
-
From the Network Edge menu, select Virtual Device Inventory.
-
Click the device you want to upgrade. The device details will display with a message at the top indicating that the software version for the device requires an upgrade.
-
Click Tools.
-
In the Memory Upgrade section, a message will indicate that a memory upgrade is available for your device. Click Upgrade Available.
-
Memory Upgrade will indicate all the steps you need to complete before starting the memory upgrade. Complete the steps, select I acknowledge that I have completed step 1 and 2, and click Continue to Memory Upgrade.
-
Click Start Memory Upgrade.
-
Click Start Memory Upgrade again to confirm that you’re ready to upgrade your device’s memory.
Once you have completed these memory upgrade steps, you have to activate your device license and upgrade your device image before returning to the portal to complete the upgrade. -
Activate your device license.
-
Click Tools.
-
In the Memory Upgrade section, click View Upgrade Details.
-
Memory Upgrade will indicate all the steps you need to complete before starting the memory upgrade. Complete the steps, select I acknowledge that I have completed step 4 and 5, and click Complete Upgrade.
-
Update your device image to 9.1.12-h3 or higher.
Downloading the new version to your device can take up to 40 minutes. Once the process is complete, you will receive an email and a portal notification that the process is complete.
Process 6 – Self-Configured Devices Version Update
Update your device image to 9.1.12-h3 or higher.
Downloading the new version to your device can take up to 40 minutes. Once the process is complete, you will receive an email and a portal notification that the process is complete.
