cdot65/pan-os-upgrade

Standalone Firewall Upgrade Completion Signal Issue

Closed this issue · 0 comments

Summary

The current script implementation for the pan-os-upgrade tool is encountering issues with detecting the completion of the upgrade process on standalone firewalls. This seems to stem from the script's reliance on output analysis designed for HA (High Availability) setups, which doesn't translate well to standalone environments.

Steps to Reproduce

  1. Run the pan-os-upgrade tool on a standalone PAN-OS firewall.
  2. Observe the behavior of the tool during the completion phase of the firewall upgrade.

Expected Behavior

After a successful upgrade, the script should accurately detect the completion of the process and provide appropriate feedback or next steps for standalone firewalls.

Actual Behavior

The script, while waiting for a signal or output indicative of an HA environment, fails to recognize the completion state of the upgrade in standalone firewall setups. This may lead to prolonged wait times or incorrect assumptions about the upgrade status.

Possible Solutions or Suggestions

  • Implement a detection mechanism that differentiates between HA and standalone environments, allowing for tailored output analysis based on the setup.
  • Introduce a timeout or fallback mechanism that assumes successful completion after a certain period if no explicit HA signals are detected.