Prepare for End-of-Life PAN-OS and Migrate to Latest PAN-OS Version

[nekumar]

How to prepare for PAN-OS end-of-life and migration.

 

IMPORTANT

PAN-OS 8.1 and 9.0 will end-of-life on March 1, 2022, and PAN-OS 10.0 will be end-of-life on July 16, 2022.  

To continue to receive uninterrupted technical support, timely bug fixes and maintenance releases, and support for content signatures, please migrate to a more recent PAN-OS version. Learn about upcoming end-of-life events on our End of Life Summary. For additional visibility into what can be expected during end of life events, please reference our end-of-life policies. 

Reach out to your Palo Alto Networks rep to kick-start migration conversations to move to the preferred release of PAN-OS 9.1 or PAN-OS 10.1. 

Find out what’s new in PAN-OS 9.1, PAN-OS 10.0, and PAN-OS 10.1. Update to new versions to take advantage of over 100+ security innovations that range from increasing security efficacy to simplifying management. 

FAQ

Q: What is Palo Alto Networks End-of-Life (EOL) support policy?  

Customers on End-of-Life (EOL) PAN-OS versions do not get technical support, content updates, bug fixes, maintenance releases, workarounds, and patches for critical bugs.

The support duration for our major releases (see definition below) is 24 months from the date of release, and all minor releases (see definition below) in a major release train will be supported for 42 months from the date of release. Refer to the “PAN-OS Version Support Policy” section here for more details. 

Q: What do these key terms mean?

• Major feature release: Where each release includes three numbers (x.y.z) : The “x” represents a major feature release, which usually includes a large number of new features and/or significant software architectural changes. Major releases have y = 0. 
• Minor feature release: The “y” in the x.y.z nomenclature above represents a minor feature release, which usually includes a small to medium number of new features and typically minimal software architecture changes. Minor releases have y > 0. 
• Maintenance release: The “z” in the x.y.z nomenclature above represents a maintenance release, which only includes bug fixes.
• Examples:

PAN-OS release  (where x is the major feature release)	Support Duration
x.0.0	Supported for 24 months.  All maintenance releases e.g., x.0.1 go end-of-life at the same time as x.0.0 release
x.1.0	Supported for 42 months.  All maintenance releases e.g., x.1.1 go end-of-life at the same time as x.1.0 release
x.2.0	Supported for 42 months All maintenance releases e.g., x.2.1 go end-of-life at the same time as x.2.0 release

Q: How is software support impacted if a PAN-OS release has reached the end of support, but an end of sale hardware platform must run the same PAN-OS release until it reaches its end of life? 

In this case, the software will continue to be supported for that specific hardware platform until the platform’s published end of life date. 

As an example, PAN-OS 8.1 will get updates as we would normally do for any mature release until the PA-5000 end of life. 

Additional Information:

PAN-OS 10.1.3 achieves Preferred status: PAN-OS 10.1.3 has officially received the preferred status for Firewalls and PAN-OS 10.1.3-h1 for Panorama.  

What's in it for you? With PAN-OS 10.1, you can:

• Simplify identity and authentication for adopting Zero Trust with Cloud Identity Engine
• Secure your SaaS and web application access, prevent new and emerging phishing and DNS attacks, and more 
• Plus,  you get 70+ new features introduced in PAN-OS 10.0 like prevention from unknown file and web-based threats with real-time protections with Machine Learning, comprehensive IoT security, data loss prevention, simplified decryption including TLS 1.3 support, that you can use on your Palo Alto Networks Next-Generation firewalls

Talk to your account rep or check out this page for more information.