Introducting pan-os-upgrade

Welcome to our comprehensive guide on upgrading your Palo Alto Networks firewalls and Panorama appliances with ease and efficiency. Join me as I introduce the pan-os-upgrade tool, a game-changer for network security administrators looking to streamline their upgrade workflows. Whether you're managing one or multiple devices, this video will provide you with the insights and steps to ensure a smooth and successful upgrade process.

🕒 Timestamps:

00:00:02 - Introduction to the video and overview of the upgrade challenge.
00:01:00 - Introduction to the pan-os-upgrade tool for automating upgrades.
00:01:53 - Overview and key features of the pan-os-upgrade tool.
00:02:20 - Network state snapshot capability and its benefits.
00:02:51 - Tool's readiness check feature for ensuring upgrade success.
00:03:20 - Importance of configuration backups before and after upgrades.
00:04:00 - Customization options within the tool for tailored upgrade processes.
00:04:27 - Limitations and untested scenarios for the pan-os-upgrade tool.
00:05:09 - Step-by-step guide on installing the pan-os-upgrade tool.
00:06:20 - Verifying the successful installation of the tool.
00:07:04 - Understanding the core sub-commands: firewall, panorama, and batch.
00:09:19 - How to use the batch mode for selecting and upgrading firewalls.
00:09:54 - The significance of the dry run mode for safe pre-upgrade checks.
00:11:06 - Utilizing the inventory sub-command for managing upgrade targets.
00:12:16 - Customizing tool settings for an optimized upgrade experience.
00:12:45 - Demonstration
00:15:36 - Wrap Up

Whether you're a seasoned network security expert or new to Palo Alto Networks, this video is packed with valuable information to help you navigate the upgrade process with confidence. From key features and customization options to hands-on demonstrations, Calvin covers everything you need to know about using the pan-os-upgrade tool effectively.

🔗 Useful Links:

💡 Tips:

Always perform a dry run before executing the actual upgrade to ensure readiness.
Customize the tool settings to match your specific network and organizational requirements.
Utilize the inventory feature for efficient management of multiple devices.
👉 Subscribe to my channel for more insightful videos on network security and technology.

Drop your questions and experiences in the comments below, and don't forget to like and share this video with your colleagues!

#PaloAltoNetworks #NetworkSecurity #panosupgrade #TechnologyTutorial #FirewallUpgrade

[bvborge]

Great stuff and good having you back posting videos related to automation 🤘🏼

[Throwawayfake]

Can we operate batch mode to upgrade an Active/Passive pair of Firewall that are not in Panorama? Seems like batch mode is required and the only way to upgrade an Active/Passive pair flawlessly?

Specific use case: New pair of firewalls (intended to replace existing ageing firewalls) are placed in a staging area(lab) for full upgrading and configuration prior to installation; the staging area does not and will never have connectivity to Panorama.

It can't be upgraded in the field (where they do have routes/connectivity to Pano) because they can't be pre-installed in the field due to rack space limitations. We have a short maintenance window to remove the existing and replace with new which is why we are completing full configurations including upgrades in the staging area (lab) prior to field install/replacement maintenance window.

[miroslavperic]

Great tool, When I was doing tests I noticed that if you are running PAYG licensing snapshot cannot be taken because licenses are missing serial number in case of PAYG and you are stuck in infinite loop where I was not able quit it. I tried classic crtl+c/q/z.
Workaround was to edit settings file to not take snapshots

[TimYamamoto-orid]

Calvin thank-you for the tool, for updating HA Pair in batch mode after the tool has completed, does one need to log into the firewalls to recheck premptive?

[JeffJones-mh]

(panosupgrade) [demonstration]$ pip install pan-os-upgrade
ERROR: Could not find a version that satisfies the requirement pan-os-upgrade (from versions: none)
ERROR: No matching distribution found for pan-os-upgrade

Do you need to download pan-os-upgrade first? How does pip know where to find it?