, the upgrade complexity and the need to carefully vet "preferred releases" is a genuine operational burden. If you want a "set it and forget it" SMB firewall, look at Fortinet (FortiOS) or Meraki. If you have a dedicated security team, Palo Alto PAN-OS is unbeatable.
Any .0 or .1 release. Wait for .5-hX at minimum. 5. Final Verdict PAN-OS is the gold standard for enterprise NGFW firmware – when it works. The security efficacy (App-ID, User-ID, Content-ID) is unmatched. The visibility is incredible. palo alto firmware