How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?

Question

Options

• AChoose the download and install action for both members of the HA pair in the Schedule object
• BSwitch context to the firewalls to start the download and install process
• CDownload the apps to the primary no further action is required
• DConfigure the firewall's assigned template to download the content updates

• A
  91% (41)
• B
  4% (2)
• C
  2% (1)
• D
  2% (1)

Explanation

Through Panorama's Dynamic Updates device deployment, you create a Schedule object, select the 'Download and Install' action, and target both HA peer members individually. Panorama handles the HA-aware sequencing - it can stagger the install across peers to maintain firewall availability. Switching context to each firewall individually (B) bypasses centralized Panorama management and defeats the purpose of device deployment. Downloading only to the primary peer (C) does not update the secondary and leaves the pair out of sync. Templates (D) manage PAN-OS configuration pushes, not content update deployments such as apps and threats.

No community discussion yet for this question.