Palo Alto Networks PAN-OS 11.1 end of life
PAN-OS · also known as PAN-OS 11.1, PANOS 11.1, PAN OS 11.1
Status
Checked 1 Oct 2026PAN-OS 11.1 support ends on 31 Aug 2027. Budget and plan a replacement in the next 11 months.
- 1End of software maintenance 3 May 2027 (in 7 months)
- 2Last date of support 31 Aug 2027 (in 11 months)
Key dates
Every date links to Palo Alto Networks' own page| Milestone | Date | Source |
|---|---|---|
| End of sale | Not announced | – |
| End of software maintenance | 3 May 2027in 7 months | Vendor bulletin ↗ |
| End of vulnerability support | Not announced | – |
| Last date of support | 31 Aug 2027in 11 months | Vendor bulletin ↗ |
End of standard support is shown as end of software maintenance; extended support starts automatically after it and ends on the last date of support. If this version is the last supported software for your hardware, Palo Alto keeps it in extended support until that hardware reaches end of life.
What this means for your business
- Security patches stop when support ends, so the exposure starts on that date.
- Cyber insurance questionnaires increasingly ask whether any equipment is unsupported or past end of life.
- Vendor support for faults ends at the same time.
- This is general information, not legal or insurance advice.
Replacement options
The right replacement depends on your sites, users and licensing, and is often cheaper than a like-for-like swap.
Keep or replace? Quick checklist
- Is it your internet-facing firewall?
- Do you have remote staff connecting through it?
- Is your cyber insurance renewal in the next 6 months?
- Do you store client or financial data behind it?
- Is it running old firmware, or does it have no active vendor licence?
Two or more “yes” answers on an unsupported or soon-to-be-unsupported device is a good reason to get advice.
Frequently asked questions
Is the PAN-OS 11.1 still safe to use?
For now, yes, but support ends soon. After that date Palo Alto Networks stops issuing security fixes, so plan a replacement before then.
What replaced the PAN-OS 11.1?
Palo Alto Networks' bulletin does not name a direct replacement that we've verified. The right choice depends on your sites, users and licensing.
Where do these dates come from?
From Palo Alto Networks' own lifecycle bulletins. Each date in the table links to its source, with the date we last checked it. Always confirm with Palo Alto Networks before making decisions.