Every network security administrator has wondered at some point: “How long will our Palo Alto firewalls be supported?” This concern is completely natural. Understanding the End of Sale (EOS) and End of Life (EOL) schedules is essential for planning timely upgrades and migrations.
This guide provides a comprehensive overview of EOS/EOL information for all major Palo Alto Networks product lines. Based on the latest available information, this resource is designed for immediate practical use in your daily operations.
1. Understanding EOS/EOL Concepts and Their Importance
What is EOS (End of Sale)?
EOS refers to the date when a product is no longer available for purchase. After this date, new purchases are not possible, but technical support continues for existing installations.
What is EOL (End of Life)?
EOL marks the complete termination of all support for a product. After this date, technical support, security patches, and firmware updates are discontinued.
Palo Alto Networks typically provides technical support for 5 years following the EOS date, provided a valid support contract is maintained continuously.
2. Palo Alto Hardware Equipment EOS/EOL Schedule by Series
PA-7000 Series – High-Performance Enterprise Firewalls
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| PA-7000 Series (All models) | December 31, 2025 | December 31, 2030 | PA-7500, PA-5450 |
Key Models Included: PAN-PA-7000-100G-NPC-A, PAN-PA-7000-LFC-A, PAN-PA-7000-DPC-A, PAN-PA-7080-AC-SYS, PAN-PA-7080-DC-SYS, PAN-PA-7050-AC-SYS, PAN-PA-7050-DC-SYS
The PA-7000 series EOS was officially announced on December 16, 2024, with the EOS date extended to December 31, 2025 (announced June 9, 2025) to provide customers with adequate migration time.
PA-5000 Series – Mid-Range Performance Firewalls
| Product | EOS Date | EOL Date | Last Supported OS |
|---|---|---|---|
| PA-5200 Series | August 31, 2023 | August 31, 2028 | PAN-OS 11.2 |
| PA-5000 Series (Legacy) | Already EOL | January 31, 2024 | PAN-OS 8.1 |
The PA-5200 series should be upgraded to PA-5400 series or PA-5450.
PA-800 Series – Small to Mid-Size Enterprise Firewalls
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| PA-800 Series | August 31, 2024 | August 31, 2029 | PA-1400 Series |
The PA-800 series EOS was announced on February 28, 2024, and was widely used in small to mid-size environments.
PA-400 Series – Next-Generation Branch Office Firewalls
| Product | Status | Recommended Use |
|---|---|---|
| PA-460, PA-450, PA-445 | Currently Available | Distributed enterprise branches |
| PA-440, PA-415, PA-415-5G | Currently Available | Retail locations, SMBs |
| PA-455, PA-410 | Currently Available | Small environments |
The PA-400 series is Palo Alto’s current flagship branch firewall product line, offering ML-Powered NGFW capabilities.
PA-3000/PA-2000 Series – Small to Medium Environments
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| PA-3200 Series | August 31, 2023 | August 31, 2028 | PA-3400 Series |
| PA-2000 Series | January 31, 2020 | January 31, 2025 | PA-400 Series |
PA-220R Ruggedized Firewall
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| PA-220R | January 31, 2025 | January 31, 2030 | PA-400R Series |
The PA-220R EOS was announced on July 31, 2024, for ruggedized environments.
Legacy Models
| Product | EOS Date | EOL Date | Status |
|---|---|---|---|
| PA-200, PA-500 | Already EOS | October 31, 2024 | Support ended |
| M-100 | Already EOS | October 31, 2024 | Support ended |
3. ION Series (Prisma SD-WAN) EOS/EOL Information
Currently EOS-Announced ION Models
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| ION 1000 | February 1, 2024 | February 1, 2029 | ION 1200 |
| ION 2000 | February 1, 2024 | February 1, 2029 | ION 1200-S |
| ION 3000 | March 15, 2024 | March 15, 2029 | Latest ION models |
| ION 9000 | June 15, 2024 | June 15, 2029 | Latest ION models |
ION 7000 Special Support Policy
ION 7000 has a special support policy:
- Prisma SD-WAN 5.6: Last recommended release
- Prisma SD-WAN 6.1, 6.3: Last supported releases
- Prisma SD-WAN 6.4, 6.5: Not recommended due to technical limitations
The ION series provides SD-WAN functionality as hardware appliances for the Prisma SD-WAN solution in distributed network environments.
4. Dedicated Appliances and Special Equipment EOS/EOL
WildFire Appliances
| Product | EOS Date | EOL Date | Status |
|---|---|---|---|
| WF-500 | Already EOS | January 31, 2024 | Support ended |
The WildFire WF-500 was a dedicated appliance for on-premises malware analysis, now replaced by cloud-based WildFire services.
GlobalProtect Appliances
| Product | EOS Date | EOL Date | Status |
|---|---|---|---|
| GP-100 | Already EOS | January 31, 2024 | Support ended |
The GP-100 was a standalone GlobalProtect portal/gateway appliance, now replaced by firewall-integrated GlobalProtect functionality.
LightCyber Magna Appliances (Behavioral Analytics)
| Product | EOS Date | EOL Date | Replacement Solution |
|---|---|---|---|
| D-150V (Virtual) | December 31, 2017 | December 31, 2020 | Cortex XDR |
| D-300, D-500, D-1000 | Already EOS | January 31, 2024 | Cortex XDR |
| P-50T, P-50TV | Already EOS | January 31, 2024 | Cortex XDR |
LightCyber was a behavioral analytics solution acquired by Palo Alto in 2017, now integrated into Cortex XDR.
5. Panorama Management Platform EOS/EOL Information
Hardware Appliances
| Product | EOS Date | EOL Date | Recommended Replacement |
|---|---|---|---|
| M-200, M-600 | February 15, 2024 | February 15, 2029 | M-300, M-700 |
| M-500 | Already EOS | January 31, 2028 | M-700 |
Panorama is Palo Alto Networks’ centralized management solution for unified management of multiple firewalls.
6. Prisma Access Browser Support Policy
Prisma Access Browser releases new versions weekly, with each version supported for approximately 3 months.
Recent Version Support Schedule (Sample)
| Version | Release Date | EOL Date |
|---|---|---|
| 140.7.x.x | September 3, 2025 | December 2, 2025 |
| 139.23.x.x | August 27, 2025 | November 25, 2025 |
| 138.69.x.x | July 30, 2025 | October 28, 2025 |
| 137.27.x.x | June 18, 2025 | September 16, 2025 |
Prisma Access Browser has a rapid release cycle requiring regular updates.
7. PAN-OS Software Version Support Policy
Currently Supported Major Versions
| PAN-OS Version | Release Date | EOL Date | Support Period |
|---|---|---|---|
| PAN-OS 11.2 | May 2, 2024 | May 2, 2027 | 36 months |
| PAN-OS 11.1 | November 16, 2023 | November 16, 2026 | 36 months |
| PAN-OS 11.0 | March 29, 2023 | March 29, 2026 | 36 months |
| PAN-OS 10.2 | August 24, 2022 | August 24, 2025 | 36 months |
| PAN-OS 10.1 | November 17, 2021 | November 17, 2024 | 36 months |
Support Policy Changes
Starting with PAN-OS 11.2 release on May 2, 2024, support period has been extended to 36 months. Previously, major releases were supported for 24 months and minor releases for 42 months, but now all major/minor releases are supported for 36 months.
8. PAN-OS SD-WAN Product Transition Information
PAN-OS SD-WAN Licensing Changes
| Product | EOS Date | Replacement Product |
|---|---|---|
| Legacy PAN-OS SD-WAN SKU | February 21, 2025 | Advanced PAN-OS SD-WAN |
According to changes announced on October 21, 2024, existing PAN-OS SD-WAN functionality will continue to be supported, but the licensing model will be consolidated into Advanced PAN-OS SD-WAN.
9. Latest Replacement Model Recommendations
High-Performance Environments (Data Centers/Service Providers)
- PA-7500: Next-generation FE400 ASIC, 1.5 Tbps App-ID performance, modular expansion
- PA-5500 Series: Released August 2025, 3RU fixed configuration (PA-5540, PA-5550, PA-5560, PA-5570, PA-5580)
Mid-Range Performance Environments (Large Enterprise)
- PA-5450: 5U modular expansion, 150 Gbps threat prevention performance
- PA-5400 Series: 2RU design high-performance models
- PA-1400 Series: PA-800 series successor
Small to Medium Environments (Branch/SMB)
- PA-400 Series: PA-460, PA-450, PA-445, PA-440, PA-415, PA-415-5G, PA-455, PA-410
- PA-400R Series: PA-220R successor ruggedized models
- PA-3400 Series: PA-3200 successor models
SD-WAN Environments
- ION 1200, ION 1200-S: Latest Prisma SD-WAN appliances
- Advanced PAN-OS SD-WAN: Legacy PAN-OS SD-WAN successor solution
10. GlobalProtect Client EOS/EOL Schedule
Currently Supported Versions
| Version | Release Date | End-of-Engineering | EOL Date |
|---|---|---|---|
| 6.3 | June 13, 2024 | June 13, 2026 | June 13, 2026 |
| 6.2 | May 23, 2023 | December 31, 2026 | December 31, 2026 |
| 6.1 | September 1, 2022 | March 1, 2025 | December 31, 2025 |
| 6.0 | February 22, 2022 | December 31, 2025 | December 31, 2025 |
Special Support Extension
GlobalProtect App 5.1 EOL has been extended to December 31, 2024 to provide continued FIPS-CC support.
11. Cortex Product Line EOS/EOL Status
Cortex XDR Agent
| Version | Release Date | EOL Date |
|---|---|---|
| 8.9 | July 21, 2025 | April 21, 2026 |
| 8.8 | April 28, 2025 | February 18, 2026 |
| 8.7.100 CE | July 2, 2025 | July 2, 2027 |
| 8.7 | February 2, 2025 | November 23, 2025 |
Cortex XSOAR
| Version | EOL Date |
|---|---|
| 8.9 | April 7, 2026 |
| 8.8 | January 6, 2026 |
| 8.7 | September 17, 2025 |
| 8.6 | July 14, 2025 |
12. VM-Series Virtual Firewall License Model Changes
Legacy Fixed License Model Termination
| Product | EOS Date | EOL Date | Replacement Solution |
|---|---|---|---|
| VM-50, VM-100, VM-200 | July 31, 2021 | July 31, 2024 | Software NGFW Credits |
| VM-300, VM-500, VM-700 | July 31, 2021 | July 31, 2024 | Software NGFW Credits |
| VM-1000-HV | July 31, 2021 | July 31, 2024 | Software NGFW Credits |
VM-Series has now transitioned to Software NGFW Credits, a flexible licensing model that provides much greater flexibility and scalability than the previous fixed models.
13. Acquired Products and Subscription Services EOL Information
Recently Acquired Product EOL
| Product | EOS Date | EOL Date | Replacement Solution |
|---|---|---|---|
| Zycada Networks (All) | March 7, 2024 | October 1, 2024 | Prisma Cloud integration |
| Cider Security | July 7, 2023 | March 29, 2024 | Prisma Cloud Code Security |
| Bridgecrew (standalone) | December 31, 2022 | December 31, 2023 | Prisma Cloud Enterprise Edition |
QRadar-Related Products (IBM Acquisition)
| Product | EOL Date |
|---|---|
| IBM Security QRadar on Cloud | April 14, 2026 |
| IBM Security QRadar Suite – Cloud-Native SIEM | April 14, 2026 |
| IBM Security QRadar Suite – SOAR | April 14, 2026 |
| IBM Security QRadar Suite – EDR | August 31, 2026 |
| IBM Security QRadar Suite – XDR | August 31, 2026 |
Palo Alto acquired QRadar-related SaaS products from IBM on August 31, 2024, with phased EOL beginning April 14, 2025.
Legacy Subscription Services
| Service | EOS Date | EOL Date | Replacement Service |
|---|---|---|---|
| BrightCloud URL Filtering | July 31, 2018 | July 31, 2021 | PAN-DB |
| TP (Threat Prevention) | June 16, 2025 | Contract expiration | Advanced Threat Prevention (ATP) |
| DNS Security | June 16, 2025 | Contract expiration | Advanced DNS Security (ADNS) |
BrightCloud licenses can be migrated to PAN-DB at no additional cost.
14. Palo Alto EOS/EOL Information Resources
Official Website Resources
- Hardware End-of-Life Dates: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates
- Software End-of-Life Summary: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary
- End-of-Sale Announcements: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-sale
Customer Support Portal Utilization
Palo Alto Networks customers can access detailed information and personalized migration guides through the Customer Support Portal.
Managing Palo Alto Networks equipment EOS/EOL involves more than simply checking dates. It requires a strategic approach that considers organizational security requirements, budget constraints, and future scalability. With multiple major models scheduled for EOS from late 2024 through 2025, early planning is crucial. For organizations using PA-7000 series or PA-220R models where EOS has already been announced, migration planning should begin immediately.
Most importantly, Palo Alto Networks continues to introduce innovative technologies. New models like the PA-7500 and PA-5450 offer significantly enhanced performance and features compared to their predecessors, making this an opportunity for security infrastructure upgrades rather than simple equipment replacement. 🙂