Streamlining Innovation and Stability: The New 12.1 PAN-OS Release Cycle & Support Policy

[rohsawhney]

At Palo Alto Networks, we understand that your security operations rely on a delicate balance: you need the latest innovations to stop emerging threats, but you also require absolute stability in your network infrastructure.

To better serve this need, we are standardizing our release cycle and support policy starting with PAN-OS 12.1. This new framework is designed to provide you with a longer (stable, simple), and more predictable roadmap for your firewall upgrades and feature adoption.

Here is a summary of what is changing and how it benefits you.

 

1. A New 4-Year Support Commitment

We are extending the lifecycle clarity for all Major PAN-OS versions (starting with 12.1). Every major release will now be supported for a total of 48 months, split into two phases:

• Standard Support (3 Years): This includes full support—Software/Content updates, bug and vulnerability fixes, and maintenance releases.
• Extended Support (1 Year): Automatically following the standard period, this phase focuses on end of life and migration to a new version. It covers critical needs only, specifically Priority 1 (P1) stability issues and Critical/High severity vulnerability fixes.

This is reflected publicly on our Palo Alto Networks End-of-Life Policy

2. Faster Access to Innovation

We are moving to a dynamic cycle for feature enhancements 

Previously, you might have had to wait for a major release to get new functionality. Under the new model, we will introduce two distinct "FRs" (Feature Releases) within the first year of a Major Release. 

• Feature Releases: New capabilities, feature enhancements, hardware support
• Maintenance Releases: Immediately following the feature release cycle, t
• What it includes: Strictly bug and vulnerability fixes 

3. Simplified Version Terminology

We are simplifying how we name our releases to reduce confusion.

• Major Versions (X.Y): There are no longer "minor" versions. Every X.Y release (e.g., 11.1, 11.2, 12.1…) is considered a Major Version. They all undergo the same rigorous QA process, support new hardware, and have the same 4-year support duration.
• Maintenance Releases (.Z): These contain bug/vulnerability fixes (e.g., 12.1.1).
• Feature Releases: Contain new features and hardware support (will be labeled as FRs)
• Hotfixes (-h#) & Patches (-p#): Targeted fixes for specific issues or critical vulnerabilities.

 

4. Choosing the Right Version: "TAC Preferred"

For customers prioritizing maximum stability over the newest features, we continue to provide the TAC Preferred release guidance. A release earns the "Preferred" tag only after it has been proven stable through significant customer adoption. To qualify, a release must have:

• Significant time in the field (minimum 4 weeks).
• Large install base (>10,000 on a major MR).
• No high-impact P1/P2 issues, widespread bugs, or regression issues.

 

5. Aligning Hardware and Software Lifecycles

It is critical to understand how Hardware End-of-Life (EOL) dates interact with Software support.

The Rule: The Hardware’s EOL date dictates the final termination of support, even when the last supported OS’s respective Standard & Extended Support windows close.

Example: PA-220 with Last Supported PAN-OS 10.2

• Hardware: PA-220 (End of Sale: Jan 2023 | End of Life: Jan 2028).
• Software: PAN-OS 10.2 (Standard Support EOL: August 27, 2025 | Extended Support EOL: September 30, 2026)
• Example: A customer who purchased a PA-220 at the End of Sale (Jan 2023) runs PAN-OS 10.2 as the last supported OS 
• They receive Standard Support for 31 months (until PAN-OS 10.2 Standard Support ends in Aug 2025).
• They then receive Extended Support for 29 months.
• Note: Extended Support begins automatically when Standard Support ends
• Hard Stop: Support ends on Jan 31, 2028, because the Hardware EOL date has been reached.

Please view these updates on our End-of-Life Policy along with HW End-of-Life Dates and SW End-of-Life Summary pages respectively. 

 

Summary

Effective with PAN-OS 12.1, we are standardizing our release cycle to deliver a predictable roadmap with extended support timelines. This new framework balances the agility to adopt innovations quickly via Feature Releases with the confidence of long-term stability.