topic Re: versions 10.2, 11.1, 11.2 - which is best? in General Topics

versions 10.2, 11.1, 11.2 - which is best?

JimMcGrady — Tue, 15 Jul 2025 04:51:19 GMT

of the current trains 10.2, 11.1, 11.2, which would be the best in terms of robustness and stability? I am running PA-440 and PA-3250. The later trains dont have any features i need over and above what is available in 10.2.

Re: versions 10.2, 11.1, 11.2 - which is best?

emr_1 — Tue, 15 Jul 2025 05:16:38 GMT

I would say 11.1.

From Software EoL perspective, 10.2 will be Limited Support in next month, thus PAN does not release updates for P2 or lower (non-critical) issues

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-policy#lsupport

From Hardware EoL, you have no chance to grab 11.2 for PA-3250. It says last supported version is 11.1.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates

Re: versions 10.2, 11.1, 11.2 - which is best?

reaper — Tue, 15 Jul 2025 10:08:03 GMT

I have very good experience rolling out 11.2 across large numbers of devices and actively recommend this version, I also try to roll out advanced DNS security wherever I can which requires 11.2

if you don't have these features and since you have 3200's in your estate it's probably better to roll out 11.1 to ensure everything's on the same feature set etc