Centralized Firewall Management Administration Guide

Table of Contents

Upgrading Devices through Firmwares

  • Available at All Tenants and Tenant level.
  • Only devices In Sync with Firewall Management can be upgraded.
  • You can upgrade different models (example: TZ80, TZ280, TZ380) if the selected firmware is compatible.
  • Devices can be selected from any tenant or group when upgrading from All Tenants.

To Upgrade Devices

  1. Navigate to Manager View > Home > Firewalls > Firmwares > Firmwares tab.
  2. Select Only show upgrades with applicable devices on the top of the table.

    This filters the list to show only firmware versions that have at least one device eligible for upgrade.

  3. Click the number under Applicable Devices column for the firmware row you want to upgrade to.

  4. In the Applicable Devices page, you can filter the list by Firmware Version or Model to see the devices.

  5. Click Upgrade.

    Devices eligible for the upgrade appear under Select Devices.

  6. Select Online devices to upgrade.

    You can select different compatible models from any tenant and any device group, as long as the firmware applies to those devices.

    • If an upgrade request includes Offline devices, the upgrade will time out after 15 minutes of the scheduled time if the device does not come online. Online devices included in the request continue upgrading successfully.

    • Devices with a firmware upgrade already In Progress or Scheduled display a status indicator and cannot be selected for another upgrade. Hover over the indicator to see who initiated or scheduled the upgrade and the timestamp. The indicator is removed once the upgrade completes, fails, or the scheduled time passes, and the device becomes selectable again. HA pairs display the same indicator and selection restriction.

    • Use search or Group By (Firmware Version, Model, Tenants, Group) to easily find devices.
  7. Under the SCHEDULE section, choose the upgrade schedule:

    • Now to upgrade immediately
    • Later to schedule for another time

      Firewalls may go offline during upgrade. A firmware upgrade usually takes around 20 minutes. Schedule during non‑business hours to minimize impact.

  8. Click Upgrade to submit the request.

    A commit will be created for the upgrade request. You can monitor status of the upgrade on The Upgrade Status tab. For more information, refer to Status of the Firmware Upgrade on Firmwares.