preferred PAN-OS software versions table

[Jacek_Loszewski]

HI, dear PaloAlto team,

Why has the preferred PAN-OS software version table been changed? The previous view was much better, because it allowed to select the preferred software version and schedule changes....
Now there is only one preferred version and no information about new, monitored realases.

Greetings
Jacek

[mshekh]

Hi @Jacek_Loszewski ,

Please refer the below link for more details related to change in PANOS Software Release Guidance Page,

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000PR2MCAW

[Jacek_Loszewski]

Thank you for your answer. But I don't completely agree with you.

First: Cybersecurity best practices recommend updating once a year or once every 2 years;

In an ideal world - maybe so. But we see that only critical CVEs are found much more often. I'm leaving out the less critical ones.

Second: The previous view included "the release versions corresponding to the informal designations used in the Comments section i.e. "New release, currently monitoring", "Other release preferred", "Later release preferred"

And this was very helpful, because not always one (as now) version is / was preferred and for this we can schedule an update to the version appropriate to what version we have.
E.g. now as preferred is 10.2.10-h9 from 18.11.2024. After this date already came out several critical CVEs and from the point of view of security, it would be appropriate to upgrade the PANOS version. I, for example, have 10.2.11-h10 (which was related to CVE-2024-3393 and was also marked as preferred) and the current information in the table is completely useless to me and does not give a glimpse into the future.

Greetings

Jacek

[mshekh]

Hi @Jacek_Loszewski ,

Thanks for info, if you have additional question you may contact to paloalto accounts team they will be right team to assist you with your queries.