Palo Alto Networks Compatibility Matrix
    : Compatible Plugin Versions for PAN-OS 10.2
    Focus
    Download PDF
    Focus
    1. Home
    2. Palo Alto Networks Compatibility Matrix
    3. Panorama
    4. Compatible Plugin Versions for PAN-OS 10.2
    Download PDF

    Palo Alto Networks Compatibility Matrix

    Compatible Plugin Versions for PAN-OS 10.2

    Table of Contents

    Compatible Plugin Versions for PAN-OS 10.2

    Determine which plugins you can use with your version of PAN-OS® 10.2 software.
    To increase reliability and robustness, we enhanced PAN-OS® software starting in PAN-OS® 10.2 with upgraded Panorama™ plugins and by installing the VM-Series plugin by default. However, we did not introduce support for all plugins with the initial release of PAN-OS 10.2.0. Use the following table to determine the minimum plugin versions for use with PAN-OS 10.2 software and, where applicable, the first PAN-OS 10.2 version that supports each plugin. (If no PAN-OS 10.2 version is specified, then the minimum version of the plugin is supported in all PAN-OS 10.2 versions.)
    For more information about plugins compatible with PAN-OS 10.2—and all other supported PAN-OS releases, refer to the Panorama Plugins page.
    Plugin Name
    Minimum Compatible Plugin Version with PAN-OS 10.2
    AWS plugin
    4.0.0
    AIOps for NGFW plugin
    1.0.0
    Azure plugin
    4.0.0
    Cloud Services plugin (for use with Cortex Data Lake only)
    3.1 (Compatible with PAN-OS 10.2.1 and later)
    Cloud Services plugin (for use with Panorama Managed Prisma Access)
    Kubernetes plugin
    3.0.0
    SW FW Licensing plugin (VM licensing plugin is not a Python-based plugin and the previous version is supported)
    1.0.0
    Panorama VM-Series plugin
    3.0.0
    SD-WAN plugin
    3.0.0
    IPS Signature Converter plugin
    2.0.0
    ZTP plugin
    2.0.0
    DLP plugin
    3.0.0
    OpenConfig plugin
    1.1.0
    GCP plugin
    3.0.0
    Cisco ACI plugin
    3.0.0
    VCenter plugin
    2.0.0
    Nutanix plugin
    2.0.0
    Cisco TrustSec plugin
    2.0.0
    Important considerations for upgrading your plugins
    • The plugin versions listed in the above table are the only plugins compatible with PAN-OS 10.2 and later PAN-OS 10.2 versions. If you use any other plugins, you should not upgrade to PAN-OS 10.2 until you upgrade all of your plugins to the minimum supported version for PAN-OS 10.2.
    • Starting with PAN-OS 10.2, the VM-Series plugin is installed by default. This option is currently available only in PAN-OS 10.2, which means that Panorama software requires that you download a compatible version of the VM-Series plugin if you downgrade your firewall from PAN-OS 10.2 to a PAN-OS 10.1 or earlier version.
    Each upgraded Panorama plugin supports any supported PAN-OS release in addition to PAN-OS 10.2.
    Supported Migration Paths for Plugins
    Plugin Name
    Upgrade/ Downgrade
    Base PAN-OS Version
    Base Plugin Version
    Target PAN-OS Version
    Target Plugin Version
    AWS
    Upgrade
    10.1.x
    3.0.x
    You should upgrade AWS plugin 2.x.x to 3.0.x in PAN-OS 10.1.x version before you upgrade to PAN-OS 10.2.
    10.2.0
    4.0.0
    Downgrade
    10.2.0
    4.0.0
    10.1.x
    3.0.x
    Azure plugin
    Upgrade
    10.1.x
    3.1.x
    10.2.0
    4.0.0
    Downgrade
    10.2.0
    4.0.0
    10.1.x
    3.2.X (yet to be released)
    Downgrading is not possible until Azure plugin 3.2.x is released.
    Kubernetes plugin
    Upgrade
    10.1.x
    2.0.x
    10.2.0
    3.0.0
    Downgrade
    10.2.0
    3.0.0
    10.1.x
    2.0.x
    If you have a custom certificate size greater than 32k, the autocommit (which happens after downgrade) will fail. To avoid this, save the config file, add a dummy value in the custom certificate that is less than 16K, and then downgrade to 2.0.x (k8s plugin cannot contact the API server). Then upgrade the plugin to 2.1.x (after release) and use the 32k original certificate.
    GCP plugin
    Upgrade
    10.1.x
    2.0.0
    10.2.0
    3.0.0
    Downgrade
    10.2.0
    3.0.0
    10.1.x
    2.0.0
    Cisco ACI plugin
    Upgrade
    10.1.x
    2.0.x
    10.2.0
    3.0.0
    Downgrade
    10.2.0
    3.0.0
    10.1.x
    2.0.x
    VCenter plugin
    Upgrade
    10.1.x
    1.0.x
    10.2.0
    2.0.0
    Downgrade
    10.2.0
    2.0.0
    10.1.x
    1.0.x
    Nutanix plugin
    Upgrade
    10.1.x
    1.0.0
    10.2.0
    2.0.0
    Downgrade
    10.2.0
    2.0.0
    10.1.x
    1.0.0
    For more information, review how to:
    Upgrade PAN-OSUpgrade PAN-OS.

    Recommended For You

    © 2023 Palo Alto Networks, Inc. All rights reserved.