Palo Alto Networks PAN-OS 9.1 end of life
PAN-OS · also known as PAN-OS 9.1, PANOS 9.1, PAN OS 9.1
Status
Checked 1 Oct 2026PAN-OS 9.1 no longer receives security fixes. If it's still running your office firewall, plan a replacement now.
- 1Last date of support 30 Jun 2024 (2 years ago)
Key dates
Every date links to Palo Alto Networks' own page| Milestone | Date | Source |
|---|---|---|
| End of sale | Not announced | – |
| End of software maintenance | Not announced | – |
| End of vulnerability support | Not announced | – |
| Last date of support | 30 Jun 20242 years ago | Vendor bulletin ↗ |
Palo Alto lists no extended support for this version, so the end-of-life date is shown as the last date of support. If this version is the last supported software for your hardware, Palo Alto keeps it in extended support until that hardware reaches end of life.
What this means for your business
- No new security patches: newly found vulnerabilities stay open on an internet-facing device.
- Cyber insurance questionnaires increasingly ask whether any equipment is unsupported or past end of life.
- No vendor support for faults, so a failure can mean days without a working firewall.
- This is general information, not legal or insurance advice.
Replacement options
The right replacement depends on your sites, users and licensing, and is often cheaper than a like-for-like swap.
Keep or replace? Quick checklist
- Is it your internet-facing firewall?
- Do you have remote staff connecting through it?
- Is your cyber insurance renewal in the next 6 months?
- Do you store client or financial data behind it?
- Is it running old firmware, or does it have no active vendor licence?
Two or more “yes” answers on an unsupported or soon-to-be-unsupported device is a good reason to get advice.
Frequently asked questions
Is the PAN-OS 9.1 still safe to use?
Not for a business network. Palo Alto Networks no longer issues security fixes for the PAN-OS 9.1, so new vulnerabilities will not be patched.
What replaced the PAN-OS 9.1?
Palo Alto Networks' bulletin does not name a direct replacement that we've verified. The right choice depends on your sites, users and licensing.
Where do these dates come from?
From Palo Alto Networks' own lifecycle bulletins. Each date in the table links to its source, with the date we last checked it. Always confirm with Palo Alto Networks before making decisions.