A Palo Alto Networks firewall that Panorama manages is called a managed device. Panorama can manage firewalls running the same major release or earlier major releases but Panorama cannot manage firewalls running a later major release. For example, Panorama running PAN-OS 9.1 can manage firewalls running PAN-OS 9.1 and earlier. Additionally, it is not recommended to manage firewalls running a later maintenance release than Panorama as this may result in features not working as expected. For example, it is not recommended to manage firewalls running PAN-OS 9.1.1 or later maintenance releases if Panorama is running PAN-OS 9.1.0. For more information on release information, see the PAN-OS 9.1 Release Notes. For more information on supported PAN-OS versions, see the End-of-Life Summary.