Pa-220 Firmware 〈Confirmed〉

Check the Palo Alto Networks support portal for known issues regarding the target firmware version, particularly for the PA-220 model. How to Upgrade PA-220 Firmware (Step-by-Step)

The Palo Alto Networks PA-220 next-generation firewall is a legendary workhorse for small offices, retail branches, and home labs. While Palo Alto Networks has officially announced the End-of-Life (EOL) timeline for this hardware platform, maintaining its firmware (PAN-OS) remains critical for security, stability, and performance.

Upgrades may need to be performed incrementally (e.g., moving from 9.1 → 10.0 → 10.1) to avoid potential configuration issues. Common PA-220 Firmware Upgrade Challenges pa-220 firmware

Because the PA-220 is EOL, you should start planning your migration. Palo Alto Networks offers a "Trade-Up" program.

Alternatively, you can directly access the software updates page at: Check the Palo Alto Networks support portal for

Once both downloads complete, click Install next to the maintenance release (the 10.2.9-h1 version). The system will automatically use the downloaded base image to execute the upgrade background processes.

Because the PA-220 has a low-power control plane, rendering the Web UI under PAN-OS 10.1 or 10.2 can completely max out the CPU. Upgrades may need to be performed incrementally (e

By adhering to this structured approach, you can ensure your PA-220 firewall remains secure and reliable throughout the year.

show system disk-space

Ensure all security subscriptions are active and that the data plane is operating normally. Clean Up Disk Space: Go to Device > Software .

PAN-OS 10.2 is the absolute maximum supported software version for the PA-220 hardware platform. Palo Alto Networks officially announced that the PA-220 (along with the PA-220R, PA-820, and PA-850) does not support PAN-OS 11.0 or any later major releases due to hardware resource limitations.