PAN-OS ® New Features Guide
- Upgrade/Downgrade Considerations
PAN-OS®9.1, the latest release of the software that powers our next-generation firewalls, continues the tradition of delivering integrated innovations. New features will help you extend security into branch offices, apply security dynamically to users, and provide better visibility for mobile users connecting to your network.
What Do You Want To Do?
Featured Video: Secure SD-WAN by Palo Alto Networks
All New SD-WAN Subscription
Our new SD-WAN subscription provides SD-WAN with all the benefits of the PAN-OS security.
Automatic Connection Recovery
Enable Automatic Connection Recovery to ensure your firewalls maintain their connection to your Panorama management system.
Use Tag Based Application Filters
Use Tag Based Application Filters to improve how you manage your security policy rules.
See What Firewall Models Support PAN-OS 9.1
Refer to the Compatibility Matrix to learn what firewall and appliance models you can upgrade to version 9.1.
Dynamic User Groups
Include Username in HTTP Header Insertion Entries
Enhanced Logging for GlobalProtect
VM-Series Firewall on VMware NSX-T (East-West)
PAN-OS 9.1 Best Practices
Best Practices for Implementing Zero Trust with Palo Alto Networks
Best Practices for Securing Administrative Access
Learn the best practices for securing administrative access to your firewalls to prevent successful cyberattacks through an exposed management interface.
Best Practices for Migrating to Application-Based Policy
Use Expedition and Policy Optimizer to migrate legacy firewall security policy to a Palo Alto Networks next-generation firewall or Panorama.
Best Practices for Getting Started
Apply security best practices to reduce the attack surface, gain visibility into traffic, prevent threats, and protect your network, users, and data.