Dynamic Updates:

Palo Alto Networks regularly posts updates for new & modified applications, threat protection,
and GlobalProtect data files through dynamic updates. You can view the latest updates, read
the release notes for each update, and then select the update you want to download and
install. You can also revert to a previously installed version of an update. Setting a schedule for
dynamic updates, allows you to define the frequency at which the firewall checks for and
downloads or installs new updates.

Antivirus:
Includes new and updated antivirus signatures, including WildFire signatures.
Applications:
Includes new and updated application signatures.
GlobalProtect Data File:
Contains the vendor-specific information for defining and evaluating host information profile
(HIP) data returned by GlobalProtect apps.
GlobalProtect Clientless VPN:
Contains new and updated application signatures to enable Clientless VPN access to common
web applications from the GlobalProtect portal.
BrightCloud URL Filtering:
Provides updates to the BrightCloud URL Filtering database only.
WildFire:
Provides near real-time malware & antivirus signatures created as result of analysis done by
WildFire public cloud. WildFire signature updates are made available every 5 minutes.

Select Device > Dynamic Updates and check which Applications or Applications and Threats to
determine which update is Currently Installed. Locate and Download the desired content
release version. After you successfully download a content update file, the link in the Action
column changes from Download to Install for that content release version. Install the update.

1 | P a g e Created by Ahmad Ali E-Mail: [email protected] , Mobile: 056 430 3717

 Options Description
Version Lists the versions that are currently available on the Palo Alto Networks
Update Server. To check if a new software release is available from Palo
Alto Networks, click Check Now.
Last checked Displays the date and time that the firewall last connected to the update
server and checked if an update was available.
Schedule Allows you to schedule the frequency for retrieving updates.
File Name List the filename; it includes the content version information.
Features Lists what type of signatures the content version might include.
Type Indicates whether download includes full database update or incremental
Size Displays the size of the content update package.
Release Date Date and time Palo Alto Networks made the content release available.
Downloaded A check mark in this column indicates that the corresponding content
release version has been downloaded to the firewall.
Currently A check mark in this column indicates that the corresponding content
Installed release version is currently running on the firewall.
Action Indicates current action you can take for corresponding software image.
Download—click to Download the content release version.
Review Policies (Application and Threat content only)—Review any policy
impact for new applications included in a content release version.
Review Apps (Application and Threat content only)—View new and
modified application signatures made available since the last content
release version installed on the firewall.
Install—The corresponding content release version has been downloaded
to the firewall; click to Install the update.
Revert—The corresponding content release version has been downloaded
previously to reinstall the same version, click Revert.
Documentation Provides a link to the release notes for the corresponding version.
Upload If the firewall does not have access to the Palo Alto Networks Update
Server, you can manually download dynamic updates from the Palo Alto
Networks Support site in the Dynamic Updates section. After you
download an update to your computer, Upload the update to the firewall.
You then select Install From File and select the file you downloaded.
Install From File After you manually upload an update file to the firewall, use this option to
install the file.

2 | P a g e Created by Ahmad Ali E-Mail: [email protected] , Mobile: 056 430 3717

Software Updates:
o PAN-OS is the software that runs all Palo Alto Networks next-generation firewalls.
o PAN-OS software version that firewall is running is displayed on firewall Dashboard.
o To view available software releases, to download or upload release, to install a release.
o Support license is required, to delete software image, or to view release notes in firewall.
o When you upgrade from one PAN-OS feature release version to later feature release.
o You cannot skip the installation of any feature release versions in path to target release.
o To get from 7.1 release version to 8.1, you would also need to install 8.0 release version.
o Select Device Software & check which version has check mark in Currently Installed column.
o Base Image is the full PAN OS software version image of Palo Alto Network Firewall.
o Maintenance is fixes and updates for the running software version image of Firewall.

Release Type What It Offers How to Identify

Major Features and Fixes 8.0.0
Minor Features and Fixes 8.1.0
Maintenance Fixes 8.1.1

Select Device > Software and click Check Now to display the latest PAN-OS updates.

3 | P a g e Created by Ahmad Ali E-Mail: [email protected] , Mobile: 056 430 3717

 Options Description
Version Lists the software versions that are currently available, to check if a new
software release is available from Palo Alto Networks, click Check Now.
Size Indicates the size of the software image.
Release Date Indicates the date and time Palo Alto Networks made the release available.
Available Corresponding version of software image is uploaded or downloaded.
Currently Indicates whether the corresponding version of the software image is
Installed activated and is currently running on the firewall.
Action Indicates current action you can take for the corresponding software image:
Download—Software version is available on Palo Alto Networks Update
Server; click to Download an available software version.
Install—The corresponding software version has been downloaded or
uploaded to the firewall; click to Install the software. A reboot is required to
complete the upgrade process.
Reinstall—The corresponding software version was installed previously; click
to Reinstall the same version.
Release Notes Provides a link to the release notes for the corresponding software update.
Removes previously downloaded or uploaded software image from firewall.
Check Now Checks whether a new software update is available from Palo Alto Networks.
Upload Imports software update image if firewall doesn’t have Internet access.

4 | P a g e Created by Ahmad Ali E-Mail: [email protected] , Mobile: 056 430 3717