Inevitably, you will need to update your firewalls. This gets a little trickier when your firewalls are configured in HA. Before starting, you need to: Check that your licensing is up to date Select a suitable version to update to Check for end of life announcements Check the update path I recommend updating to a ‘.1’ release, as these are the long term support releases. You will also need to update to the base of a release as part of the upgrade path. This is because the base release contains the full PAN-OS image, while everything after that is just an update. The basic procedure is to: Make sure Application and Threat updates and Wildfire updates are installed Download the updates to both units Update the secondary and reboot Disable preemption Failover the firewalls Update the remaining node and reboot Repeat for each additional update Reenable HA and preemption Overview of this video: 0:00 Introduction 0:18 Preparation 1:22 Updating Patreon information: https://networkdirection.net/patreon/ LET'S CONNECT 🌏 null 🌏 https://twitter.com/NetwrkDirection 🌏 https://www.patreon.com/NetworkDirection 🌏 https://www.networkdirection.net/ #NetworkDirection #networking #paloalto EOL Summary: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary