Given the firmware limitations, the strategic path for network administrators is migration. Palo Alto Networks has positioned the PA-440 as the direct replacement for the PA-220. The PA-440 offers significantly higher performance metrics, supports the latest PAN-OS versions, and is built to handle the decryption demands of modern encrypted traffic.
Updates can be managed directly on the device or via a centralized management platform: Direct via Firewall : Navigate to Device > Software pa-220 firmware
Or via GUI: .