2025 Q4 Enterprise Firewall Report – Palo Alto Networks Follow-On
Rating: Recommended
Technology: Enterprise Firewall
Date Published: November 25, 2025
During the initial test of PAN-OS 11.2.8-c537, NSS Labs was able to bypass protection using Layer 3 IP and Layer 4 TCP evasions. Following receipt of test results published on November 5, 2025, Palo Alto Networks responded quickly to develop an updated PAN-OS firmware package (PAN-OS 11.2.10-c37) that NSS Labs then tested using the identical test methodology and tools employed in the original evaluation.
This document provides updated test results for the Palo Alto Networks PA-1410 Enterprise Firewall utilizing PAN-OS version 11.2.10-c37. Palo Alto Networks confirmed that PAN-OS version 11.2.10-c37 was provided as a pre-release and will be designated as PAN-OS 11.2.10 upon reaching general availability.