Panorama Plugins

Learn about compatibility information for Panorama plugins.
Panorama 8.0 introduces support for the extensible plugin architecture. The following tables describe the features and functionality introduced with the Panorama plugins.

VMware NSX

The following table shows the features introduced in each version of the VM-Series firewall VMware NSX plugin. For additional information about each plugin, see the release notes on the Customer Support Portal.
Plugin Version
Minimum Panorama Version
New Features or Changes
1.0.0
8.0.0
First plugin introduced to support the integration with VMware NSX.
1.0.1
8.0.0
Adds support for NSX Manager 6.3 with vSphere 6.5a.
1.0.2
8.0.0
Introduces fixes for known issues. No new features.
1.0.3
8.0.0
Introduces fixes for known issues. No new features.
2.0.0
8.0.5
Introduces support for multiple NSX Managers on a single Panorama.
2.0.1
8.0.5
Introduces fixes for known issues. Minimum required plugin version for Panorama 8.1.
2.0.2
8.0.5
Introduces fixes for known issues.
2.0.3
8.0.5
Introduces fixes for known issues.
2.0.4
8.0.5
Introduces the Automated Full Dynamic Address Group Sync feature.
2.0.5
8.0.5
Introduces Proxy Bypass Support and Curl Call Timeout features.
3.0.0
9.0.3
Introduces the VM-Series firewall on VMware NSX-T for North-South traffic protection.
Panorama Plugin for VMware NSX 3.0.0 supports VMware NSX-T deployments only. Do not use the Panorama plugin for VMware NSX 3.0.0 to manage the VM-Series firewall on NSX-V.

Cloud Services

The Cloud Services plugin supports Prisma Access and Cortex Data Lake.
Starting October 31, 2019, Prisma Access requires a minimum Panorama version of PAN-OS 9.0.3-h3. This upgrade is mandatory and is required to support new future Prisma Access releases. For more information about upgrading Panorama appliances, see Install Content and Software Updates for Panorama in the Panorama 9.0 Administrator’s Guide and Known Issues Related to PAN-OS 9.0 in the PAN-OS 9.0 Release Notes.
There are no known issues in Panorama 9.0.3-H3 that affects Prisma Access. We have several Prisma Access customers who have successfully upgraded to Panorama 9.0.
After October 31, 2019, you will not be able to manage Prisma Access using Panorama versions earlier than 9.0. Upgrading your Panorama to 9.0.3-h3 does not give you access to any new PAN-OS 9.0 features in Prisma Access yet; new feature availability will be communicated when it is available.
Panorama Minimum Version
Cloud Services Plugin Minimum Version
8.0.5
1.4
8.1.0
1.4
8.1.1
1.4
9.0.0
1.4

Interconnect

Panorama minimum supported version for the Panorama Interconnect plugin.
The following table shows the features introduced in each version of the Panorama Interconnect plugin.
Plugin Version
Minimum Panorama Version
New Features or Changes
1.0.0
8.1.3
First plugin introduced to support a two-tier Panorama deployment for a horizontal scale-out architecture.

Public Cloud-AWS, Azure, GCP

Learn about the different public cloud plugins supported on Panorama.
The following table shows the features introduced in each version of the Panorama plugin for Amazon Web Services, Microsoft Azure, and Google Cloud Platform. The plugins use device groups and templates on Panorama to push the configuration to the managed firewalls.
Public Cloud Platform
AWS Plugin Version
Minimum Panorama Version
VM-Series Plugin Version
Features
AWS
1.0.0
8.1.3
9.0.0
N/A
Enables support for VM Monitoring to monitor the virtual machine inventory within your AWS VPCs so that you can consistently enforce Security policy that automatically adapts to changes within your AWS deployment.
2.0.0
8.1.8
N/A
9.0.2 and later
1.0.4
Public Cloud Platform
Azure Plugin Version
Minimum Panorama Version
VM-Series Plugin Version
Features
Azure
1.0.0
8.1.3
9.0.0
N/A
Enables support for VM Monitoring from Panorama. Configure the Panorama plugin for Azure to monitor the virtual machine inventory within your Azure subscription.
2.0.0
8.1.8
N/A
Enables support for:
9.0.3
1.0.4
Enables support for:
Public Cloud Platform
GCP Plugin Version
Minimum Panorama Version
VM-Series Plugin Version
Features
GCP
1.0.0
8.1.3
9.0.0
N/A
Enables you to secure Kubernetes services in a Google Kubernetes Engine (GKE) cluster and learn about the services that are exposed to the internet.

Cisco ACI

Learn about the Panorama plugin for Cisco ACI.
The following table shows the features introduced in each version of the Panorama plugin for Cisco ACI. The plugin uses device groups on Panorama to push the configuration to the managed firewalls.
Plugin Version
Minimum Panorama Version
Features
1.0.1
8.1.6
Introduces support for multiple IP addresses per endpoint and Cisco ACI 4.0 and later.
1.0.0
8.1.6
Enables support for Endpoint Monitoring from Panorama. Configure the Panorama plugin for Cisco ACI to monitor endpoints so that you can consistently enforce security policy that automatically adapts to changes within your ACI deployment.

VMware vCenter

Learn about the Panorama plugin for VMware vCenter.
The following table shows the features introduced in each version of the Panorama plugin for VMware vCenter.
Plugin Version
Minimum Panorama Version
Features
1.0.0
9.0.2
Enables support for VM Monitoring from Panorama. Configure the Panorama plugin for VMware vCenter to monitor VM workloads so that you can consistently enforce security policy that automatically adapts to changes within your vCenter environment.

Related Documentation