Panorama Plugins

Learn about compatibility information for Panorama™ plugins.
Palo Alto Networks introduced support for the extensible plugin architecture in Panorama™ 8.0. The following tables describe the features and functionality introduced with the Panorama plugins.

VMware NSX

Review the features introduced in each version of the VM-Series firewall VMware NSX plugin.
The following table shows the features introduced in each version of the VM-Series firewall VMware NSX plugin. For additional information about each plugin, see the release notes on the Customer Support Portal.
Plugin Version
Minimum Panorama Version
Maximum Panorama Version
New Features or Changes
3.1.0
9.1.0
Latest
Introduces the VM-Series firewall on VMware NSX-T for East-West traffic protection.
2.0.6
8.1.0
9.0.x
Introduces fixes for known issues.
2.0.5
8.1.0
9.0.x
Introduces Proxy Bypass Support and Curl Call Timeout features.
2.0.4
8.1.0
9.0.x
Introduces the Automated Full Dynamic Address Group Sync feature.
2.0.3
8.1.0
9.0.x
Introduces fixes for known issues.
2.0.2
8.1.0
9.0.x
Introduces fixes for known issues.
2.0.1
8.1.0
9.0.x
Introduces fixes for known issues. Minimum required plugin version for Panorama 8.1.

Cloud Services

Review minimum Panorama™ and plugin versions depending on whether you use the plugin for both Cortex™ Data Lake and Prisma™ Access or for only Cortex Data Lake.
The Cloud Services plugin supports Prisma™ Access and Cortex™ Data Lake. The minimum Panorama™ and plugin version depends on whether you use the Cloud Services plugin for both Cortex Data Lake and Prisma Access or for only Cortex Data Lake.
Supported Panorama Version
Cloud Services Plugin Minimum Version
  • If you use the Cloud Services plugin for Prisma Access and Cortex Data Lake—9.0.4 or later of PAN-OS 9.0.x or 9.1.1 or later of PAN-OS 9.1.x.
    Your Panorama must be running a minimum version of 9.0.4
    before installing the 1.6 Cloud Services plugin. PAN-OS 9.1.1 is also supported with the 1.6 plugin, but if you are upgrading from an earlier plugin version, you should upgrade the plugin to 1.6 before upgrading your Panorama from 9.0.
    x
    to 9.1.1, because earlier plugin versions are not compatible with PAN-OS 9.1.1. The Cloud Services plugin 1.6 and later require Panorama version 9.0.4 or 9.1.1 as the minimum version. Installing the 1.6 plugin on a Panorama running 8.1 or earlier is not supported, and will result in an unsupported configuration and data loss.
  • If you use the Cloud Services plugin for Prisma Access and Cortex Data Lake—1.6

Interconnect

The Panorama™ minimum supported version for the Panorama Interconnect plugin.
The following table shows the features introduced in each version of the Panorama™ Interconnect plugin.
Plugin Version
Minimum Panorama Version
New Features or Changes
1.0.0
8.1.3
First plugin introduced to support a two-tier Panorama deployment for a horizontal scale-out architecture.

Public Cloud-AWS, Azure, GCP

Learn about the different public cloud plugins supported on Panorama™.
The following table shows the features introduced in each version of the Panorama™ plugin for Amazon Web Services, Microsoft Azure, and Google Cloud Platform. The plugins use device groups and templates on Panorama to push the configuration to the managed firewalls.
Public Cloud Platform
AWS Plugin Version
Panorama Version
(
Minimum
)
Maximum Panorama Version
VM-Series Plugin Version
(
Minimum
)
Features
AWS
2.0.1
9.0.0 (
9.0.6
)
Latest
1.0.4
Introduces a fix for a known issue.
9.1.0 (
9.1.2
)
Latest
2.0.0
9.0.0 (
9.0.6
)
Latest
1.0.4
9.1.0 (
9.1.2
)
Latest
1.0.1
8.1.x (
8.1.3
)
9.0.x
9.0.x
N/A
Introduces fixes for known issues.
1.0.0
8.1.x (
8.1.3
)
9.0.x
9.0.x
N/A
Enables support for VM Monitoring to monitor the virtual machine inventory within your AWS VPCs so that you can consistently enforce Security policy that automatically adapts to changes within your AWS deployment.
Public Cloud Platform
Azure Plugin Version
Panorama Version
(
Minimum
)
Maximum Panorama Version
VM-Series Plugin Version
(
Minimum
)
Features
Azure
2.0.2
8.1.x (
8.1.11
)
9.0.x (
9.0.5
)
Latest
1.0.4
Introduces fixes for known issues.
2.0.1
8.1.x (
8.1.11
)
9.0.x (
9.0.5
)
Latest
1.0.4
Introduces fixes for known issues.
2.0.0
8.1.x (
8.1.8
)
Latest
N/A
Enables support for:
9.0.x (
9.0.3
)
Latest
1.0.4
Enables support for:
1.0.0
8.1.x (
8.1.3
)
9.0.x
9.0.x
N/A
Enables support for VM Monitoring from Panorama. Configure the Panorama plugin for Azure to monitor the virtual machine inventory within your Azure subscription.
Public Cloud Platform
GCP Plugin Version
Minimum Panorama Version
Maximum Panorama Version
VM-Series Plugin Version
Features
GCP
2.0.0
(Upgrade from 1.0.0 to 2.0.0 is not supported.)
9.0.x (
9.0.4
)
Latest
1.0.4
Enables you to monitor and secure VMs or GKE clusters deployed in GCP.
  • Deploy auto scaling for VM instance groups or GKE clusters using auto scaling templates for both firewall and application deployments.
  • VM Monitoring for GCP assets.

Cisco ACI

Learn about the Panorama™ plugin for Cisco ACI.
The following table shows the features introduced in each version of the Panorama™ plugin for Cisco ACI. The plugin uses device groups on Panorama to push the configuration to the managed firewalls.
Plugin Version
Minimum Panorama Version
Maximum Panorama Version
Features
2.0.0
9.0.x
9.1.x
Latest
Introduces the Panorama Plugin for Cisco ACI Dashboard and two new monitored attributes—L2 external endpoint groups and subnets under bridge domains.
1.0.1
8.1.6
9.1.x
Introduces support for multiple IP addresses per endpoint and Cisco ACI 4.0 and later.
1.0.0
8.1.6
9.1.x
Enables support for Endpoint Monitoring from Panorama. Configure the Panorama plugin for Cisco ACI to monitor endpoints so that you can consistently enforce security policy that automatically adapts to changes within your ACI deployment.

VMware vCenter

Learn about the Panorama™ plugin for VMware vCenter.
The following table shows the features introduced in each version of the Panorama™ plugin for VMware vCenter.
Plugin Version
Minimum Panorama Version
Maximum Panorama Version
Features
1.0.0
9.0.2
Latest
Enables support for VM Monitoring from Panorama. Configure the Panorama plugin for VMware vCenter to monitor VM workloads so that you can consistently enforce security policy that automatically adapts to changes within your vCenter environment.

Cisco TrustSec

Learn about the Panorama™ plugin for Cisco TrustSec.
The following table shows the features introduced in each version of Panorama™ plugin for Cisco TrustSec.
Plugin Version
Minimum Panorama Version
Features
1.0.1
9.0.0
1.0.0
9.0.0
Enables support for endpoint monitoring from Panorama. Configure the Panorama plugin for Cisco TrustSec to monitor endpoints so that you can consistently enforce security policy that automatically adapts to changes within your TrustSec environment.

Nutanix

Learn about the Panorama™ plugin for Nutanix.
The following table shows the features introduced in each version of the Panorama™ plugin for Nutanix.
Plugin Version
Minimum Panorama Version
Maximum Panorama Version
Features
1.0.0
9.0.4
Latest
Enables support for VM Monitoring from Panorama. Configure the Panorama plugin for Nutanix to monitor VM workloads so that you can consistently enforce security policy that automatically adapts to changes within your Nutanix environment.

SD-WAN

Learn about the Panorama™ plugin for SD-WAN.
The following table shows the features introduced in each version of the Panorama™ plugin for SD-WAN.
Plugin Version
Minimum Panorama Version
Features
1.0.2
9.1.2-h1
Improves ease of use, such as an automatic Security policy rule to allow BGP between branches and hubs, ability to refresh the IKE preshared key for VPN cluster members, specifying VPN tunnel IP address ranges, and more.
1.0.1
9.1.1
Improves monitoring experience and search filtering, and adds an option to display HA peers consecutively.
1.0.0
9.1.0
Enables support for SD-WAN from Panorama. Configure the Panorama plugin for SD-WAN to provide intelligent and dynamic path selection on top of the industry-leading security that PAN-OS software already delivers. Provide the optimal end user experience by leveraging multiple ISP links to ensure application performance and scale capacity.

Recommended For You