A Palo Alto Networks firewall that Panorama manages
is called a
managed device. Panorama can manage firewalls
running the same major release or earlier major releases but Panorama
cannot manage firewalls running a later major release. For example,
Panorama running PAN-OS 9.1 can manage firewalls running PAN-OS
9.1 and earlier. Additionally, it is not recommended to manage firewalls
running a later maintenance release than Panorama as this may result
in features not working as expected. For example, it is not recommended
to manage firewalls running PAN-OS 9.1.1 or later maintenance releases
if Panorama is running PAN-OS 9.1.0. For more information on release
information, see the PAN-OS 9.1
Release Notes. For more information
on supported PAN-OS versions, see the
End-of-Life Summary.