This release introduces over 60 new features, with a heavy emphasis on , advanced threat prevention leveraging on-device machine learning, and substantial hardware acceleration for the PA-5400 series. For security architects, the move to PAN-OS 11.0 is characterized by the transition from signature-based detection to behavior-based analysis via Advanced URL Filtering and the new Advanced DNS Security license.
Select and install the downloaded maintenance release file. The system will automatically leverage the staged base image background files to complete the direct migration without intermediate system reboots.
Palo Alto Networks segments its documentation by minor release versions. Depending on your current deployment environment, utilize the direct links below to access relevant software logs and feature lists:
As with any major release, check the Related Documentation and verify your support contract before starting the process. It is always a "best practice" to test the new version in a lab environment first to see how changes to default behavior might affect your specific traffic.
In addition to new features, PanOS 11 also includes several key enhancements, such as:
These links provide the complete source of truth for PAN-OS 11.0, from new features to specific known issues.
PAN-OS 11.0 Release Notes
Before you upgrade, we highly recommend reviewing the official technical documentation to understand the hardware requirements and addressed issues:
: To explore the specific capabilities introduced in this version—such as Advanced WildFire and new hardware support—refer to the Features Introduced in PAN-OS 11.0 guide.
11 Jan 2026 — Release Notes. PAN-OS Release Notes. PAN-OS Release Notes. > Related Documentation for PAN-OS 11.1. Next-Generation Firewall Docs. Palo Alto Networks | TechDocs PAN-OS 11.0.0 Known and Addressed Issues