Upgrade the SD-WAN Plugin

1. Log in to the Panorama web interface.
2. Upgrade the SD-WAN plugin version on Panorama.

   For Panorama in a high availability (HA) configuration, repeat this step on the Panorama HA peer.

   1. Select PanoramaPlugins and Check Now for the latest sd_wan plugin version.
   2. Download and Install the latest version of the SD-WAN plugin.
   3. After you successfully install the SD-WAN plugin, select Commit and Commit to Panorama.

      This step is required before you can commit any configuration changes to Panorama.
3. After the new plugin version successfully installs, view the Panorama Dashboard and in the General Information widget verify that the SD-WAN plugin displays the SD-WAN plugin version you upgraded to.
4. (Existing deployments only) Clear the SD-WAN cache on Panorama.

   This step is required for existing SD-WAN deployments that you upgrade the SD-WAN plugin to any of the following SD-WAN plugin versions.

   • SD-WAN plugin 1.0.4 and later 1.0 versions
   • All SD-WAN plugin 2.0 versions
   • All SD-WAN plugin 2.1 versions

   For new SD-WAN deployments, you do not need to clear the SD-WAN cache on Panorama if you install the Panorama plugin for SD-WAN version 2.1 on Panorama after you upgrade to PAN-OS 10.1.

   After successful upgrade of the SD-WAN plugin, you must clear the SD-WAN cache on Panorama for existing SD-WAN deployments only. This is required for Panorama to utilize the updated naming convention for IKE gateways and IPSec tunnels.

   Clearing the SD-WAN cache does not delete any existing SD-WAN configuration but modifies the IP address, tunnel, and gateway naming conventions for the new format introduced in Panorama plugin for SD-WAN version 2.1.

   1. Log in to the Panorama CLI.
   2. Clear the SD-WAN cache on Panorama.

      admin> debug plugins sd_wan drop-config-cache all

   3. Select CommitCommit to Panorama.
   4. Select CommitPush to DevicesEdit Selection and verify that all hub and branch firewalls are included in the Push Scope.
   5. Push to your hub and branch firewalls.