Upgrade to Panorama Interconnect Plugin 2.0 is required to upgrade to PAN-OS 11.0. You must download the Panorama Interconnect Plugin 2.0.0 prior to install of PAN-OS 11.0.1 to successfully upgrade.

The Zero Touch Provisioning (ZTP) Plugin 2.0.3 release includes minor bug and performance fixes.

You can perform admin-level commits even when there are pending changes that affect the order of a policy rulebase from other admins. This simplifies your configuration workflow because you don't have to coordinate commits with other administrators when your changes are unrelated to theirs and no longer requires you to wait for a Superuser admin to be available to do a full commit on Panorama.

The Panorama plugin for Cisco TrustSec now provides support for static SGT (Security Group Tags) retrieved from the Cisco ISE server. The static SGTs are used in the same way dynamic SGTs are currently used; IP addresses and tags are extracted and forwarded to the Panorama plugin framework, which then pushes them to the firewalls. Static SGTs can improve security posture when an endpoint does not authenticate through Cisco ISE.