Microperimeter Deployment Prerequisites
Learn about the prerequisites for deploying Microperimeter.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- Private and public cloud platforms, including ESXi, KVM,
Nutanix, AWS, Azure, and GCP.
|
The Microperimeter agent must be installed on a supported Linux distribution. The
solution does not currently support bare metal servers or Windows workloads.
Supported Operating Systems
Ensure your workloads run one of the following non-EOL Linux distributions:
| Non-EOL Linux distributions supporting Microperimeter |
|---|
| Ubuntu 22.04 or 24.04 |
| RedHat Enterprise Linux (RHEL) 8.x or 9.x |
| AlmaLinux 8.x or 9.x |
| Rocky Linux 8.x or 9.x |
| OpenSuse 15.6 |
Panredirect Package
Firewall Requirements
Based on the linux distribution, configure the firewalls in your Linux
environment to allow Geneve redirection.
To enable geneve in RedHat Linux on
public Linux firewall zone, execute the following
command:firewall-cmd --zone=public --add-port=6081/udp
--permanent
- Redirected traffic re-entering the same firewall is not supported. The
data interface used for this feature must be dedicated to this feature and not used
for other traffic.
Software and Licensing
This feature is supported with Prisma AIRS firewalls, standard VM-Series
firewalls do not support this feature.
Interface Configuration
Configure at least one Layer 3 (L3) data interface with the following:
Management Profile
To support telemetry and health checks, attach an Interface Management Profile to the
data interface that allows HTTPS and ping.
