Device Certificate for a Palo Alto Networks Cloud Service
Table of Contents
Expand all | Collapse all
- CN-Series Firewalls
- MFA Vendor Support
-
- Cloud Identity Engine Cipher Suites
-
- PAN-OS 11.2 GlobalProtect Cipher Suites
- PAN-OS 11.2 IPSec Cipher Suites
- PAN-OS 11.2 IKE and Web Certificate Cipher Suites
- PAN-OS 11.2 Decryption Cipher Suites
- PAN-OS 11.2 Administrative Session Cipher Suites
- PAN-OS 11.2 HA1 SSH Cipher Suites
- PAN-OS 11.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.1 GlobalProtect Cipher Suites
- PAN-OS 11.1 IPSec Cipher Suites
- PAN-OS 11.1 IKE and Web Certificate Cipher Suites
- PAN-OS 11.1 Decryption Cipher Suites
- PAN-OS 11.1 Administrative Session Cipher Suites
- PAN-OS 11.1 HA1 SSH Cipher Suites
- PAN-OS 11.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.0 GlobalProtect Cipher Suites
- PAN-OS 11.0 IPSec Cipher Suites
- PAN-OS 11.0 IKE and Web Certificate Cipher Suites
- PAN-OS 11.0 Decryption Cipher Suites
- PAN-OS 11.0 Administrative Session Cipher Suites
- PAN-OS 11.0 HA1 SSH Cipher Suites
- PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.2 GlobalProtect Cipher Suites
- PAN-OS 10.2 IPSec Cipher Suites
- PAN-OS 10.2 IKE and Web Certificate Cipher Suites
- PAN-OS 10.2 Decryption Cipher Suites
- PAN-OS 10.2 Administrative Session Cipher Suites
- PAN-OS 10.2 HA1 SSH Cipher Suites
- PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.1 GlobalProtect Cipher Suites
- PAN-OS 10.1 IPSec Cipher Suites
- PAN-OS 10.1 IKE and Web Certificate Cipher Suites
- PAN-OS 10.1 Decryption Cipher Suites
- PAN-OS 10.1 Administrative Session Cipher Suites
- PAN-OS 10.1 HA1 SSH Cipher Suites
- PAN-OS 10.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 9.1 GlobalProtect Cipher Suites
- PAN-OS 9.1 IPSec Cipher Suites
- PAN-OS 9.1 IKE and Web Certificate Cipher Suites
- PAN-OS 9.1 Decryption Cipher Suites
- PAN-OS 9.1 Administrative Session Cipher Suites
- PAN-OS 9.1 HA1 SSH Cipher Suites
- PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode
- Prisma Access
- Strata Cloud Manager and Panorama Feature Parity
- User-ID Agent
- Terminal Server (TS) Agent
- Strata Logging Service Software Compatibility
- Cortex XDR
- Endpoint Security Manager (ESM)
- IPv6 Support by Feature
- Mobile Network Infrastructure Feature Support
Device Certificate for a Palo Alto Networks Cloud Service
Review which Palo Alto Networks cloud service requires a device certificate.
A Palo Alto Networks cloud service is a cloud-hosted service maintained and operated
by Palo Alto Networks.
You must install the appropriate device certificate on the firewalls, Panorama™
appliances, and WildFire® appliances that are using the cloud service that is running
one of the following PAN-OS® versions:
- PAN-OS 11.2.0 or a later PAN-OS 11.2 version
- PAN-OS 11.1.0 or a later PAN-OS 11.1 version
- PAN-OS 11.0.2 or a later PAN-OS 11.0 version
- PAN-OS 10.2.5 or a later PAN-OS 10.2 version
- PAN-OS 10.1.10 or alater PAN-OS 10.1 version
- PAN-OS 9.1.8 or a later PAN-OS 9.1 version
Review the Palo Alto Networks cloud services listed below that require you to install a device
certificate before it will function as expected. Panorama management of firewalls,
Dedicated Log Collectors, and WildFire appliances or downloading content and software
updates from the Palo Alto Networks update server does not require a device certificate.
You also do not need to install a device certificate to establish communication between
a firewall and a WildFire appliance.
Cloud Service | Firewall (Individual and Panorama-Managed) | Panorama |
|---|---|---|
AIOps | Yes | Yes |
App-ID Cloud Engine (ACE) | Yes | Yes |
Cloud Services (Prisma® Access) | N/A | No |
Strata™ Logging Service (Formerly Cortex® Data Lake) | Yes ( PAN-OS 10.1 and later ) | Yes ( PAN-OS 10.1 and later ) |
Device Telemetry | Yes | Yes |
Enterprise DLP | Yes | Yes |
Inline Categorization Also requires an Advanced URL Filtering license | Yes | No |
Inline Cloud Analysis Also requires an Advanced Threat Protection license | Yes | No |
Internet of Things (IoT) Security | Yes | Yes |
ZTP | No | Yes |