of your current configuration ( device -> setup -> operations -> save named configuration snapshot ). Upload and Install the software. Restart the firewall to complete the upgrade.
Palo Alto uses a strict "preferred path." You cannot directly jump from PanOS 10.0 to 11.0.
Reviewing known issues prevents common deployment pitfalls that can disrupt device management:
The PAN-OS 11 series (codenamed "Nova") includes several major maintenance releases. Use these direct links to access specific release notes, known issues, and feature guides: PAN-OS 11.0 Release Notes New Features Guide PAN-OS 11.1 Release Notes Features Introduced PAN-OS 11.2 Release Notes Features Introduced Release Timeline & Lifecycle Release Date End-of-Life (EoL) Date PAN-OS 11.2 May 2, 2024 May 2, 2027 PAN-OS 11.1 Nov 3, 2023 May 3, 2027 PAN-OS 11.0 Nov 17, 2022 Nov 17, 2024 End-of-Life Summary Key Components of the Release Notes When reviewing the notes on the Technical Documentation Portal , look for these critical sections: End-of-Life Summary - Palo Alto Networks panos 11 release notes link
+-------------------------------------------------------------------+ | PAN-OS 11 Ecosystem | +-----------------------------------+-------------------------------+ | Security Engines | Management Layer | +-----------------------------------+-------------------------------+ | - Advanced WildFire | - Panorama Central Control | | - Inline Deep Learning (C2) | - TLS 1.3 Encryption | | - Advanced DNS Security (DoH) | - Strata Cloud Manager | +-----------------------------------+-------------------------------+
: For a breakdown of every new capability, visit Features Introduced in PAN-OS 11.0 .
PAN-OS 11.1 continues the theme of AI and automation, with a strong focus on operational efficiency. Key features include: of your current configuration ( device -> setup
The represents a major shift toward AI/ML-driven threat prevention, advanced cloud data processing, and highly scaled networking features. As organizations face increasingly sophisticated, zero-day threat actors, modern security firewalls must adapt dynamically rather than relying strictly on legacy static signatures. Core Security Innovations in PAN-OS 11
Introduces the primary software foundation. This version includes App-ID cloud integration, stateful DHCPv6 prefix delegation, and support for PA-400 series lab firewalls. PAN-OS 11.1
With the upgrade to Nova, Sarah’s firewalls gained , a system that uses intelligent run-time memory analysis to catch zero-day malware that traditional sandboxes might miss. The release notes highlight that this technology can stop 26% more zero-day malware and detect 60% more injection attacks than previous versions. Palo Alto uses a strict "preferred path
(Note: Replace 11-0 with 11-1 for PAN-OS 11.1 or 11-2 for PAN-OS 11.2 in the URL)
If you are searching for the , you have come to the right place. Beyond just the URL, this article breaks down the most critical changes, deprecated features, and upgrade caveats you must read before clicking "Install."