With High Availability (HA), you may avoid downtime when upgrading PAN-OS on PA firewalls HA pair. For active/active firewalls, it doesn’t matter which peer you upgrade first. For active/passive firewalls, you must upgrade the passive peer first. This video shows how to upgrade PAN-OS from Version 9 to version 10 on Palo Alto Firewall HA Pair.
![](https://i.ytimg.com/vi/5xQ9_PTjwYY/maxresdefault.jpg)