Discover the recommended order for upgrading your PAN-OS environment. Learn why upgrading Panorama, log collectors, and then firewalls ensures optimal performance.
Table of Contents
Question
An engineer has been given approval to upgrade their environment to the latest of PAN-OS.
The environment consists of both physical and virtual firewalls, a virtual Panorama HA pair, and virtual log collectors.
What is the recommended order of operational steps when upgrading?
A. Upgrade the firewalls, upgrade log collectors, upgrade Panorama
B. Upgrade the firewalls, upgrade Panorama, upgrade the log collectors
C. Upgrade the log collectors, upgrade the firewalls, upgrade Panorama
D. Upgrade Panorama, upgrade the log collectors, upgrade the firewalls
Answer
D. Upgrade Panorama, upgrade the log collectors, upgrade the firewalls
Explanation
The recommended order of operational steps when upgrading an environment consisting of both physical and virtual firewalls, a virtual Panorama HA pair, and virtual log collectors to the latest of PAN-OS is:
D. Upgrade Panorama, upgrade the log collectors, upgrade the firewalls
The rationale behind this order is as follows:
- Upgrade Panorama: Panorama is the central management system for all firewalls (physical and virtual). Upgrading Panorama first ensures that it can support the new PAN-OS version on the firewalls and log collectors.
- Upgrade the log collectors: Log collectors should be upgraded next to ensure they can handle logs from the firewalls running the new PAN-OS version.
- Upgrade the firewalls: Finally, upgrade the firewalls. At this point, both Panorama and the log collectors are running the new PAN-OS version and can support the firewalls.
Palo Alto Networks PCNSE certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Palo Alto Networks PCNSE exam and earn Palo Alto Networks PCNSE certification.