Second, there is the issue of . Palo Alto Networks has formally scheduled the end of support for the PA-220. Once the support date expires, the firmware will no longer receive security patches or content updates. In the context of firewall technology, running an unsupported firmware version is akin to leaving the front door of a business unlocked; newly discovered zero-day vulnerabilities will remain unpatched, leaving the network exposed to exploitation.
Never upgrade a PA-220 directly from a very old version to the newest one. You must step through the recommended upgrade paths. pa-220 firmware