Software EOL 10.2

[moorek]

10.2 is listed on https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary#pan-... as having an EOL in August followed by a limited support EOL in 2026.

It's notated as continuing to be supported on certain models of hardware until their end of life.

Trying to wrap my head around this. Will reach out to our account rep but thought I'd post here for a change. On PA-5410s, which have no EOL announced, does this mean I need to get updated by August?

[BPry]

@moorek,

You will want to upgrade seeing as your 5410 will not be a part of the extended support since it can update.

While I don't support PAN pushing this 'limited support' change when they had previously extended PAN-OS 10.2 support, the EOL policy was previously 42 months of support post release which is where the Aug 27 2025 date comes in. It was previously extended and you likely documented the Feb 28 2026 EOL date that was previously published before PAN implemented this 'limited support' policy change, with the new Sep 30 2026 actually being extended past that termination. Not trying to defend what happened here in the slightest, I think the lack of communication of this change and introduction of 'limited support' is rather appalling, it's not completely out of left field.

Now if we wanted to have a completely separate conversation about PAN implementing this change silently in the background for the community to discover and plan around without broad conversation from PAN, I'm all for that stress relief session. I think this is going to cause a ton of people to fall into the BS 'limited support' period because they weren't informed of the change in status or what 'limited support' actually means. The way that PAN has went about this change is absolutely not acceptable from a security company to date; I think the majority of customers will never even notice they fell into this new 'limited support' tier. Even those of us that pay attention to this sort of stuff likely discovered this through Reddit instead of PAN itself. Tie in the fact that 'limited support' is only fixing CVSS > 9.0 exploitable vulnerabilities on a security appliance and this is one of the biggest fails that PAN has made in a while.