PAN-OS 11 introduces "Nova," featuring advanced AI-driven security, enhanced cloud services, and significant updates to Advanced WildFire for improved threat detection [1, 2]. Detailed documentation includes a new features guide, technical release notes for specific versions, and a comprehensive list of introduced features covering network management and Panorama [1, 2, 3]. For a detailed overview, review the official documentation on the Palo Alto Networks website.
Now Live: PAN-OS 11.0 is Here to Redefine Network Security We are excited to announce that Palo Alto Networks has officially released PAN-OS 11.0, also known as "Nova." This release is a major leap forward, focusing on stopping zero-day threats in real-time and simplifying complex security management. What’s New in PAN-OS 11.0?
According to the PAN-OS 11.0 New Features guide on the LIVEcommunity, this release introduces several groundbreaking capabilities:
Advanced WildFire: Now uses real-time memory analysis to catch evasive zero-day malware that traditional sandboxes might miss.
Advanced Threat Prevention: Features the industry’s first inline deep learning to block unknown Command and Control (C2) attacks instantly.
AIOps for NGFW: Proactively identifies misconfigurations and security gaps before they become a problem.
Enhanced Web Proxy: Integrates proxy capabilities directly into the firewall, simplifying the transition from legacy proxy architectures. Release Notes & Documentation
Before you upgrade, we highly recommend reviewing the official technical documentation to understand the hardware requirements and addressed issues:
Official PAN-OS 11.0 Release Notes : Review the full list of new features, Known Issues , and Addressed Issues .
Features Introduced in PAN-OS 11.0 : A deep dive into networking, management, and Panorama-specific updates.
Associated Software Versions: Ensure your GlobalProtect and User-ID agents are compatible. Upgrade Best Practices
As with any major release, check the Related Documentation and verify your support contract before starting the process. It is always a "best practice" to test the new version in a lab environment first to see how changes to default behavior might affect your specific traffic.
Ready to secure your network with Nova? Head over to the Support Portal to download the latest images today! AI responses may include mistakes. Learn more
PanOS 11 Release Notes: What's New and Exciting
Palo Alto Networks has recently released PanOS 11, the latest version of their operating system for their next-generation firewalls. This new version brings a plethora of enhancements, new features, and improvements to the table. In this blog post, we'll dive into the PanOS 11 release notes and highlight the key takeaways.
Link to PanOS 11 Release Notes: You can find the official PanOS 11 release notes on the Palo Alto Networks website: https://docs.paloaltonetworks.com/panos/11_0_0/new-features.html
What's New in PanOS 11?
PanOS 11 is packed with exciting new features and enhancements that aim to improve the overall security posture of organizations. Some of the notable features include:
Key Enhancements
In addition to new features, PanOS 11 also includes several key enhancements, such as:
Why Upgrade to PanOS 11?
Upgrading to PanOS 11 offers several benefits, including:
In conclusion, PanOS 11 is a significant release that brings a wide range of new features, enhancements, and improvements to the table. We encourage organizations to review the PanOS 11 release notes and consider upgrading to take advantage of the latest security capabilities and performance enhancements.
Additional Resources:
The official release notes for PAN-OS 11.0, also known as Nova, highlight its major focus on artificial intelligence and machine learning to combat sophisticated zero-day threats.
The full list of technical updates, including known and addressed issues, is available at the official PAN-OS 11.0 Release Notes portal. Core "Nova" Highlights
PAN-OS 11.0 introduces several industry-first capabilities designed to stop evasive malware and simplify network security:
Advanced WildFire: Now stops 26% more zero-day malware than traditional sandboxes by using intelligent run-time memory analysis.
Advanced Threat Prevention (ATP): Reimagined to detect 60% more injection attacks in real-time by moving machine learning models inline.
AIOps for NGFW: A proactive tool that uses AI/ML to predict and prevent misconfigurations and health issues before they impact your environment.
Native Web Proxy: Simplifies security architecture for organizations that require explicit proxies for compliance or specific network designs.
SaaS Security Posture Management (SSPM): Integrated with Next-Gen CASB to identify and fix dangerous misconfigurations in over 60 enterprise SaaS apps. Key Networking & Hardware Features
New Hardware Platforms: Includes the PA-5440 for data centers and the PA-1400 Series for large branches, offering up to 5x higher performance than previous generations. panos 11 release notes link
Small Branch Resiliency: The PA-445 and PA-415 models bring Power over Ethernet (PoE) and fiber flexibility to smaller sites.
Advanced Routing: Extension of Bidirectional Forwarding Detection (BFD) support to the PA-400 series and stateful DHCPv6 Client with Prefix Delegation. Reference Links
Feature Guide: For a breakdown of every new capability, visit Features Introduced in PAN-OS 11.0.
Software Compatibility: Check the Associated Content and Software Versions to ensure your GlobalProtect or User-ID agents are compatible before upgrading.
You can find the official release notes for Palo Alto Networks PAN-OS 11.0 (Nova) and its related maintenance releases through the Palo Alto Networks Technical Documentation Portal. Key Release Documentation
Main Release Notes: The PAN-OS 11.0 Release Notes landing page provides a comprehensive list of known and addressed issues for the base 11.0.0 version and subsequent updates.
New Features Guide: To explore the specific capabilities introduced in this version—such as Advanced WildFire and new hardware support—refer to the Features Introduced in PAN-OS 11.0 guide.
Version 11.1 Updates: For the latest features and fixes in the 11.1 branch, visit the PAN-OS 11.1 Release Notes. Critical Version Information
PAN-OS 11.0: Released on November 17, 2022, with an End-of-Life date of November 17, 2024.
PAN-OS 11.1: Released on November 3, 2023, with support continuing through May 3, 2027. PAN-OS 11.0.0 Known and Addressed Issues
DNS tunnels have long been a vector for data exfiltration and C2 (Command and Control) communication. PAN-OS 11.0 decouples DNS security from the standard Threat Prevention license into a dedicated Advanced DNS Security capability.
PAN-OS 11.0 is supported on a wide range of hardware (PA-Series appliances) and virtual firewalls (VM-Series). However, some older hardware models have reached End-of-Life (EOL) and do not support PAN-OS 11.0. It is critical to check the "PAN-OS 11.0 Hardware Compatibility" matrix included in the notes.
Before you click the link to download, verify these three things:
Read the full technical details here: PAN-OS 11.0 Release Notes
Stay tuned for our follow-up post: "Why we rolled back from PAN-OS 11.0 after 48 hours" (Just kidding... mostly).
Since you did not provide a specific URL, I have constructed this detailed white paper based on the official release data for PAN-OS 11.0. This document consolidates the feature announcements, technical specifications, and upgrade considerations derived from the official Palo Alto Networks release documentation. Enhanced Threat Prevention : PanOS 11 includes new
Before proceeding with any upgrade, log in to the Palo Alto Networks Support Portal and verify the specific release notes for the exact minor version (e.g., 11.0.1, 11.0.2) you intend to install, as features and bug fixes vary between minor updates.
You can find the official release notes for PAN-OS 11.0 and 11.1 on the Palo Alto Networks technical documentation portal: Main Release Note Links
PAN-OS 11.0 Release Notes: Covers the base release for the "Nova" series, including new hardware support and foundational security features like Advanced WildFire.
PAN-OS 11.1 Release Notes: Contains documentation for current maintenance releases, known issues, and addressed issues. Key Documentation Sections
New Features: For a breakdown of what's new in these versions, visit the Features Introduced in PAN-OS 11.0 page. Known and Addressed Issues:
Detailed lists for specific sub-versions (e.g., PAN-OS 11.1.13) are updated regularly to track software bugs and fixes.
Related Documentation: The Related Documentation page provides a comprehensive guide to associated content like hardware guides and networking features. 1.13) or details about new hardware support?
PAN-OS 11.1.0 Known and Addressed Issues - Palo Alto Networks
The official release notes for PAN-OS 11 are available through the Palo Alto Networks Technical Documentation Portal. This central hub provides detailed links for specific versions, including known issues, addressed issues, and new feature summaries. The Story of PAN-OS 11 "Nova"
In the world of network security, the release of PAN-OS 11—codenamed "Nova"—marked a shift toward proactive, AI-driven defense. Imagine a network administrator, Sarah, who had grown weary of the "cat-and-mouse" game with hackers. Traditional sandboxing often let evasive malware slip through because the detection wasn't fast enough.
With the upgrade to Nova, Sarah’s firewalls gained Advanced WildFire, a system that uses intelligent run-time memory analysis to catch zero-day malware that traditional sandboxes might miss. The release notes highlight that this technology can stop 26% more zero-day malware and detect 60% more injection attacks than previous versions.
Beyond just brute-force defense, Nova simplified Sarah's daily tasks:
Web Proxy Support: She could finally consolidate her security stack, migrating her old proxy-based network to a single Next-Generation Firewall (NGFW) without changing her underlying architecture.
AIOps for NGFW: Her team started using machine learning to predict potential misconfigurations and health issues before they caused downtime.
New Hardware: The release introduced specialized hardware like the PA-445, featuring Power Over Ethernet (PoE) support, making it easier for her to deploy small office setups by powering devices like access points directly from the firewall.
For those following Sarah's lead, the PAN-OS 11.0 New Features Guide serves as the definitive manual for configuring these advanced capabilities. x or a specific hardware compatibility chart? PAN-OS 11.0.0 Known and Addressed Issues Key Enhancements In addition to new features, PanOS
Palo Alto uses a strict "preferred path." You cannot directly jump from PanOS 10.0 to 11.0.
| Current Version | Minimum Intermediate Version | Target Version | | :--- | :--- | :--- | | 10.0.x | Upgrade to 10.1.8-h2 first | 11.0.0 | | 10.1.x | Upgrade to 10.1.10 first | 11.0.0 | | 10.2.x | Directly to 11.0.0 (allowed) | 11.0.0 | | 11.0.x | Directly to 11.1.0 | 11.1.0 |