Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementMedium
A network engineer is preparing to install a PAN-OS software update on a Palo Alto Networks firewall. Before initiating the installation, the engineer needs to ensure that the firewall has sufficient resources and is in a healthy state. Which of the following pre-installation checks is considered a best practice?
- AVerify the firewall's serial number and support contract status.
- BDisable all security policies and NAT rules temporarily.
- CPerform a factory reset to clear all existing configurations.
- DConfirm sufficient free disk space and memory utilization.
Show answer & explanationAnswer & explanation
Correct answer: D. Confirm sufficient free disk space and memory utilization.
Before a PAN-OS upgrade, it's critical to verify that the firewall has enough free disk space for the new image and sufficient memory to handle the upgrade process. Insufficient resources can lead to failed upgrades or instability.
Why the other options are wrong
- A. Important for licensing and support, but not a direct technical prerequisite for the installation process itself.
- B. Disabling policies and NAT rules is highly disruptive and unnecessary for a software update.
- C. A factory reset erases the configuration and is not a pre-installation step for an upgrade; it's a last resort troubleshooting step or for re-provisioning.
PAN-OS Upgrade Pre-check
Essential checks performed on a Palo Alto Networks firewall before initiating a PAN-OS software update to ensure a successful and stable upgrade process.
- Verify disk space and memory.
- Check current PAN-OS version and upgrade path.
- Backup configuration and state.
Memory trick: Check the health and space before the big software surgery.