StudyToCert

All certifications / NGFW Engineer / Lessons

Palo Alto Networks Certified Next-Generation Firewall Engineer NGFW-Engineer · Domain 2: PAN-OS device setting configuration

Software and content updates: PAN-OS upgrade paths and base images, HA upgrade order, dynamic update schedules and thresholds

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

A firewall runs two kinds of code that update on different schedules. PAN-OS software is the operating system, released as feature releases (such as 10.2, 11.0 or 11.1) with maintenance releases within each (like a later 11.1.x build) that fix bugs and security issues. Content updates are signatures and data: Applications and Threats (App-IDs plus vulnerability and spyware signatures), Antivirus, WildFire, GlobalProtect data files and others. Content updates arrive frequently and install without a reboot. Keeping both current is a core security task, and doing it carelessly is a common cause of outages.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study NGFW Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the NGFW Engineer study plan