Panorama provides a centralized interface for managing dynamic updates across multiple firewalls. The primary deployment actions include: Schedules, which automate the download and installation of updates at specified times; Install, which allows an administrator to manually push a specific content version to managed devices on-demand; and Revert content, which provides a critical rollback mechanism to a previous version if a new update introduces issues. These three functions give administrators comprehensive control over the dynamic update deployment lifecycle, from automated rollouts to manual intervention and remediation.

A. Check dependencies: This is an automated background process that Panorama performs before an installation to ensure compatibility, not a user-selectable deployment option.

C. Verify: Integrity verification is an automatic part of the download process to ensure the file is not corrupt. It is not a manual deployment action.

1. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2: In the section on managing updates from Panorama

the guide details the primary actions available.

Install: "To manually install a content update on a firewall

select Device Deployment > Dynamic Updates

locate the update

and click Install." (Paraphrased from the "Install Content Updates on a Firewall" section).

Schedules: "You can configure a recurring schedule for Panorama to retrieve and install new content updates on managed firewalls." (Referenced in the "Schedule Content Updates for a Firewall" section).

Revert content: "If a content update causes issues...you can revert to a previously installed version... In Panorama

select Device Deployment > Dynamic Updates... and for the device you want to revert

click Revert." (Referenced in the "Revert to a Previous Content Version" section).

2. Palo Alto Networks Panorama™ Administrator’s Guide 10.2: The "Deploy Updates to Firewalls and Log Collectors" section explicitly describes the workflow and options. It states

"From Panorama

you can deploy software and content updates to managed firewalls... You can install updates on-demand or create schedules for recurring updates." This section also details the "Revert" capability for content updates as a management action.