FAQ: What is the Recommended PAN-OS Version?

[jdelio]

Hello there, 

As a former Technical Support Engineer, one question I was often asked was "What version of PAN-OS do you recommend?"  Unsurprisingly, this question also comes up on a regular basis as a LIVEcommunity discussion.

Luckily, the answer is easy to find—Palo Alto Networks' support engineers have a Support PAN-OS Software Release Guidance article located in LIVEcommunity's Customer Resources area.

(In order to view this resource, be sure to sign-in with your customer credentials, as it requires customer rights to view.)

Recommended versions article detailing out the current recommended versions

The Support PAN-OS Software Release Guidance article is constantly updated with every new revision. It lists out all of the currently supported versions of PAN-OS, Release Dates, and what version is Support Preferred. 

The article covers the following products:

• PAN-OS for Firewalls
• Panorama on VM / M-series
• GlobalProtect
• User-ID / Terminal Server Agent

That article is reviewed on a weekly basis to ensure that it remains up-to-date with the latest information on the recommended version of the latest software.

In the article, you'll also find links to the latest Security Advisories, as well as recommended versions for Updated Prisma Access Software Release Guidance.

I hope that this helps someone find the information that they need!

Thanks for taking time to read my blog.
If you enjoyed this, please hit the Like (thumb up) button, don't forget to subscribe to the LIVEcommunity Blog area.

As always, we welcome all comments and feedback in the comments section below.

Stay Secure,
Joe Delio
End of line

[kmcjannett]

I can't access the link to the page in LIVEcommunity to review the preferred version, I keep getting:

"You do not have sufficient privileges for this resource or its parent to perform this action."

[kiwi]

Hi @kmcjannett,

It doesn't seem like your email address is linked to a customer account.

As the article mentions: "in order to view this resource, be sure to sign-in with your customer credentials, as it requires customer rights to view".

Cheers !

-Kiwi.

[PMKochie]

How do you determine which "release branch" to use?

[JayGolf]

Hi @PMKochie ,

This differs for many organizations. What I would recommend is to go with the major release that provides the features that you'd like to use or need and go for the preferred release. Currently, the preferred release for 9 code is 9.1.13-h3, 10 is 10.0.10-h1, 10.1.5-h2. 

The preferred release is what is recommended by our TAC organization to be "stable" versions.