The following table details the changes
in default behavior upon upgrade to PAN-OS® 10.1. You may also want
to review the Upgrade/Downgrade Considerations before upgrading
to this release.
Persistent Uncommitted Changes on PAN-OS
On upgrade to PAN-OS 10.1, all uncommitted configuration
changes on firewalls and Panorama are preserved if the management
process, firewall, or Panorama restart before you can commit the changes.
This is supported for PA-Series and VM-Series firewalls and Panorama
M-Series and virtual appliances.
Device Group Push from Panorama to a Multi-VSYS
One or more device group pushes from Panorama
to multiple VSYS on a multi-VSYS firewall are now bundled as a single
commit job on the managed firewall to reduce the overall commit
job completion time.
Software Next Generation Firewall Credits
In PAN-OS 10.1 you can use Software Next Generation
Firewall credits to license VM-Series firewalls deployed with up
to 32 vCPUs. Previously Software Next Generation Firewall Credits
could license no more than 16 vCPUs.
VM-700 Deployment on Hyper-V
When a VM-700 is deployed on Hyper-V there is
a drop in performance if the host physical function (PF) max transmission
unit (MTU) is set 1504 while the device MTU is set to 1500 and the device
maximum segment size (MSS) is set to 1460.To work around this issue,
set the host PF MTU to 1500 and on the device, set the MTU to 1496
and the MSS to 1456.