07-14-2025 09:51 PM
of the current trains 10.2, 11.1, 11.2, which would be the best in terms of robustness and stability? I am running PA-440 and PA-3250. The later trains dont have any features i need over and above what is available in 10.2.
07-14-2025 10:16 PM
I would say 11.1.
From Software EoL perspective, 10.2 will be Limited Support in next month, thus PAN does not release updates for P2 or lower (non-critical) issues
https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary
From Hardware EoL, you have no chance to grab 11.2 for PA-3250. It says last supported version is 11.1.
07-15-2025 03:08 AM
I have very good experience rolling out 11.2 across large numbers of devices and actively recommend this version, I also try to roll out advanced DNS security wherever I can which requires 11.2
if you don't have these features and since you have 3200's in your estate it's probably better to roll out 11.1 to ensure everything's on the same feature set etc
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
