Cortex XDR Agent 9.2 End of Life: February 28, 2027
The Cortex XDR agent 9.2 reaches end of life on February 28, 2027. The date is in the Traps, ESM and Cortex XDR agent table of Palo Alto Networks' End-of-Life Summary, which lists agent 9.2 as released on May 3, 2026. Palo Alto Networks' End-of-Life Policy defines the end-of-life date as the last day it supports a product. The release before it, 9.1, gets there first, on November 22, 2026.
Key Dates at a Glance
- Cortex XDR 9.3: end of life 2027-05-16
- Cortex XDR 9.2: end of life 2027-02-28
- Cortex XDR 9.1: end of life 2026-11-22
- Cortex XDR 9.0: end of life 2026-08-23
Cortex XDR agent releases and their end-of-life dates
| Agent release | Released | End of life (Palo Alto Networks) |
|---|---|---|
| 9.3 | July 26, 2026 | May 16, 2027 |
| 9.2 | May 3, 2026 | February 28, 2027 |
| 9.1 CE | June 15, 2026 | June 22, 2028 |
| 9.1 | January 25, 2026 | November 22, 2026 |
| 9.0 | November 9, 2025 | August 23, 2026 |
| 8.7 CE | July 2, 2025 | July 2, 2027 |
| 7.9.103 CE | November 11, 2024 | December 31, 2027 |
Palo Alto Networks notes that 7.9.103 CE is supported only for Windows 7 and Windows Server 2008 R2. Every agent release we track, including those already past end of life, is on the Cortex XDR page.
Standard releases and critical environment (CE) releases
Palo Alto Networks ships two kinds of Cortex XDR agent release, and its End-of-Life Policy gives them different support windows:
- Standard (major feature) releases, such as 9.0, 9.1, 9.2 and 9.3: supported for 9 months. These carry the new agent features.
- Critical environment (CE) releases, such as 8.7 CE and 9.1 CE: supported for 24 months. The policy describes them as builds for sensitive, highly regulated environments that change very little over time and receive only critical bug fixes and high-severity security fixes.
The two lines can share a number and still end on different days: 9.1 ends on November 22, 2026, while 9.1 CE runs to June 22, 2028. Check which line an endpoint runs, not just its version number.
What to do
- Find the agent release on every endpoint. The Cortex XDR console reports the agent version for each endpoint; group them by release and by line (standard or CE).
- On 9.1 or older standard releases: 9.1 ends on November 22, 2026, and 9.0 already reached its date on August 23, 2026. Upgrade these first.
- On 9.2: plan the move before February 28, 2027. The newest standard release, 9.3, is supported until May 16, 2027, so a fleet on the standard line upgrades again within months.
- If endpoints cannot be upgraded every few months: look at the CE line, which is supported for 24 months but carries fewer changes, and confirm with Palo Alto Networks that the CE release supports the operating systems and features you rely on.
Frequently Asked Questions
When does the Cortex XDR agent 9.2 reach end of life?
Palo Alto Networks' End-of-Life Summary gives the Cortex XDR agent 9.2 an end-of-life date of February 28, 2027. The end-of-life date is the last day Palo Alto Networks supports the release.
How long is a Cortex XDR agent release supported?
Palo Alto Networks' End-of-Life Policy supports a standard (major feature) Cortex XDR agent release for 9 months and a critical environment (CE) release for 24 months. CE releases change very little and receive only critical bug fixes and high-severity security fixes.
Which Cortex XDR agent releases are supported longest?
The critical environment releases. On Palo Alto Networks' End-of-Life Summary, 9.1 CE is supported until June 22, 2028 and 8.7 CE until July 2, 2027, while the newest standard release, 9.3, ends on May 16, 2027.
Related
- Cortex XDR — every agent release and its status
- PAN-OS — Palo Alto Networks' firewall operating system
- PAN-OS end of life — versions, dates and upgrade paths