Changes to Default Behavior in PAN-OS 10.1

What default behavior changes impact PAN-OS 10.1?
The following table details the changes in default behavior upon upgrade to PAN-OS® 10.1. You may also want to review the Upgrade/Downgrade Considerations before upgrading to this release.
Persistent Uncommitted Changes on PAN-OS
On upgrade to PAN-OS 10.1, all uncommitted configuration changes on firewalls and Panorama are preserved if the management process, firewall, or Panorama restart before you can commit the changes. This is supported for PA-Series and VM-Series firewalls and Panorama M-Series and virtual appliances.
Device Group Push from Panorama to a Multi-VSYS Firewall.
One or more device group pushes from Panorama to multiple VSYS on a multi-VSYS firewall are now bundled as a single commit job on the managed firewall to reduce the overall commit job completion time.
Software Next Generation Firewall Credits
In PAN-OS 10.1 you can use Software Next Generation Firewall credits to license VM-Series firewalls deployed with up to 32 vCPUs. Previously Software Next Generation Firewall Credits could license no more than 16 vCPUs.
VM-700 Deployment on Hyper-V
When a VM-700 is deployed on Hyper-V there is a drop in performance if the host physical function (PF) max transmission unit (MTU) is set 1504 while the device MTU is set to 1500 and the device maximum segment size (MSS) is set to 1460.To work around this issue, set the host PF MTU to 1500 and on the device, set the MTU to 1496 and the MSS to 1456.

Recommended For You