Panorama Plugins
Learn about compatibility information for Panorama™ plugins.
The following tables describe the features and functionality
introduced with the Panorama™ extensible plugin architecture.
For more information on Panorama plugin versions, refer to the VM-Series and Panorama Plugins
Release Notes.
Cisco ACI
Learn about the Panorama™ plugin for Cisco ACI.
The following table shows the features introduced in
each version of the Panorama™ plugin for Cisco ACI. The plugin uses
device groups on Panorama to push the configuration to the managed
firewalls.
Plugin Version | Minimum Cisco ACI Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|---|
2.0.1 |
| 9.0.x 9.1.x 10.0.x | Latest | Introduces fixes for known issues. |
2.0.0 |
| 9.0.x 9.1.x 10.0.x | Latest | Introduces the Panorama Plugin for Cisco ACI Dashboard
and two new monitored attributes—L2 external endpoint groups and subnets
under bridge domains. |
1.0.1 |
| 8.1.6 | 9.1.x | Introduces support for multiple IP addresses
per endpoint and Cisco ACI 4.0 and later. |
1.0.0 |
| 8.1.6 | 9.1.x | Enables support for Endpoint Monitoring from Panorama.
Configure the Panorama plugin for Cisco ACI to monitor endpoints
so that you can consistently enforce security policy that automatically
adapts to changes within your ACI deployment. |
Cisco TrustSec
Learn about the Panorama™ plugin for Cisco TrustSec.
The following table shows the features introduced in
each version of Panorama™ plugin for Cisco TrustSec.
Plugin Version | Minimum Panorama Version | Features |
---|---|---|
1.0.2 | 10.0.0 | Introduces the PubSub monitoring mode, which parses
notifications directly from the server. The plugin enables PubSub
mode when v1.0.2 is running on Panorama 10.0.0 and later. If v1.0.2 is
running on a Panorama version earlier than 10.0.0, the monitoring
mode is Bulk Sync. |
1.0.1 | 9.0.0 |
|
1.0.0 | 9.0.0 | Enables support for endpoint monitoring from
Panorama. Configure the Panorama plugin for Cisco TrustSec to monitor endpoints
so that you can consistently enforce security policy that automatically
adapts to changes within your TrustSec environment. |
Cloud Services
Review minimum Panorama™ and plugin versions depending
on whether you use the plugin for both Cortex™ Data Lake and Prisma™
Access or for only Cortex Data Lake.
The Cloud Services plugin supports Prisma™ Access and Cortex™ Data Lake. The
minimum Panorama™ and plugin version depends on whether you use
the Cloud Services plugin for both Cortex Data Lake and Prisma Access
or for only Cortex Data Lake.
Supported Panorama Version | Cloud Services Plugin Minimum Version |
---|---|
If you use the Cloud Services plugin for
Prisma Access 1.7 and Cortex Data Lake:
If
you use the Cloud Services plugin for Prisma Access 1.8 and Cortex
Data Lake:
If
you use the Cloud Services plugin for Prisma Access 2.0 Preferred
and Cortex Data Lake:
| If you use the Cloud Services plugin for
Prisma Access and Cortex Data Lake: 1.7 |
Enterprise Data Loss Prevention (DLP)
Learn about the Panorama™ plugin for Enterprise Data
Loss Prevention (DLP).
The following table shows the features introduced in
each version of the Panorama™ plugin for Enterprise Data Loss Prevention
(DLP).
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
1.0.2 | 10.0.3 | Latest | No new features were added for this release. |
1.0.1 | 10.0.2 | Latest | Enables support for Enterprise DLP from Panorama.
Configure the Panorama plugin for Enterprise DLP to protect
against unauthorized access, misuse, extraction, and sharing of
sensitive information and effectively filter network traffic to
block or generate an alert before sensitive information leaves the
network. |
Interconnect
The Panorama™ minimum supported version for the Panorama
Interconnect plugin.
The following table shows the features introduced in
each version of the Panorama™ Interconnect plugin.
Plugin Version | Minimum Panorama Version | New Features or Changes |
---|---|---|
1.0.0 | 8.1.3 | First plugin introduced to support a two-tier
Panorama deployment for a horizontal scale-out architecture. |
IPS Signature Converter
Learn about the Panorama IPS Signature Converter plugin.
The following table shows the features introduced in
each version of the Panorama™ IPS Signature Converter plugin.
Plugin Version | Minimum Panorama Version | Features |
---|---|---|
1.0.0 | 10.0.0 | Enables support for third-party IPS signature conversion from
Panorama. Use the Panorama IPS Signature Converter plugin to gain
immediate protection against newly discovered threats by converting
third-party IPS rules into Palo Alto Networks custom threat signatures
and distributing them to your Panorama-managed firewalls. |
Kubernetes
The following table shows the features introduced in
each version of the Panorama™ Kubernetes plugin.
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
1.0.2 | 10.0.0 | Latest | Introduces fixes for known issues. |
1.0.1 | 10.0.0 | Latest | Introduces the ability to disable the creation
of service objects on Panorama, and support for offline licensing
of CN-Series firewalls with Panorama. |
1.0.0 | 10.0.0 | Latest | Manages licenses for the CN-Series firewall
and enables you to monitor clusters and leverage Kubernetes labels
that you use to organize Kubernetes objects. The plugin communicates
with the API server and retrieves metadata, giving you visibility
into applications running within a cluster. |
Nutanix
Learn about the Panorama™ plugin for Nutanix.
The following table shows the features introduced in
each version of the Panorama™ plugin for Nutanix.
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
1.0.0 | 9.0.4 | Latest | Enables support for VM Monitoring from Panorama.
Configure the Panorama plugin for Nutanix to monitor VM workloads
so that you can consistently enforce security policy that automatically
adapts to changes within your Nutanix environment. |
Public Cloud-AWS, Azure, GCP
Learn about the different public cloud plugins supported
on Panorama™.
The following table shows the features introduced in
each version of the Panorama™ plugin for Amazon Web Services, Microsoft
Azure, and Google Cloud Platform. The plugins use device groups
and templates on Panorama to push the configuration to the managed
firewalls.
Public Cloud Platform | AWS Plugin Version | Panorama Version ( Minimum ) | Maximum Panorama Version | VM-Series Plugin Version ( Minimum ) | Features |
---|---|---|---|---|---|
AWS | 2.0.2 | 9.0.0 ( 9.0.6 ) | Latest | 1.0.4 | Introduces fixes for known issues. |
9.1.0 ( 9.1.2 ) | Latest | 1.0.8 | |||
10.0.0 ( 10.0.0 ) | Latest | 2.0.0 | |||
2.0.1 | 9.0.0 ( 9.0.6 ) | Latest | 1.0.4 | Introduces a fix for a known
issue. | |
9.1.0 ( 9.1.2 ) | Latest | ||||
2.0.0 | 9.0.0 ( 9.0.6 ) | Latest | 1.0.4 | Enables support for: | |
9.1.0 ( 9.1.2 ) | Latest | 1.0.8 | |||
1.0.1 | 8.1.x ( 8.1.3 )9.0.x | 9.0.x | N/A | Introduces fixes for known issues. | |
1.0.0 | 8.1.x ( 8.1.3 )9.0.x | 9.0.x | N/A | Enables support for VM Monitoring to monitor
the virtual machine inventory within your AWS VPCs so that you can consistently
enforce Security policy that automatically adapts to changes within
your AWS deployment. |
Public Cloud Platform | Azure Plugin Version | Panorama Version ( Minimum ) | Maximum Panorama Version | VM-Series Plugin Version ( Minimum ) | Features |
---|---|---|---|---|---|
Azure | 3.0.0 | 10.0 ( 10.0.1 ) | Latest | 2.0.1 | Introduces Panorama Orchestration. |
2.0.3 | 9.0.0 ( 9.0.6 ) | Latest | 1.0.4 | Introduces a fix for a known issue. | |
9.1.0 ( 9.1.2 ) | Latest | 1.0.8 | |||
10.0.0 ( 10.0.0 ) | Latest | 2.0.0 | |||
2.0.2 | 8.1.x ( 8.1.11 )9.0.x ( 9.0.5 ) | Latest | 1.0.4 | Introduces fixes for known issues. | |
2.0.1 | 8.1.x ( 8.1.11 )9.0.x ( 9.0.5 ) | Latest | 1.0.4 | Introduces fixes for known issues. | |
2.0.0 | 8.1.x ( 8.1.8 ) | Latest | N/A | Enables support for:
| |
9.0.x ( 9.0.3 ) | Latest | 1.0.4 | Enables support for:
| ||
1.0.0 | 8.1.x ( 8.1.3 )9.0.x | 9.0.x | N/A | Enables support for VM Monitoring from Panorama. Configure
the Panorama plugin for Azure to monitor the virtual machine inventory
within your Azure subscription. |
Public Cloud Platform | GCP Plugin Version | Minimum Panorama Version | Maximum Panorama Version | VM-Series Plugin Version | Features |
---|---|---|---|---|---|
GCP | 2.0.0 (Upgrade from 1.0.0 to 2.0.0
is not supported.) | 9.0.x ( 9.0.4 ) | Latest | 1.0.4 | Enables you to monitor and secure VMs or
GKE clusters deployed in GCP.
|
SD-WAN
Learn about the Panorama™ plugin for SD-WAN.
The following table shows the features introduced in
each version of the Panorama™ plugin for SD-WAN.
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
2.0.2 | 10.0.3 | Latest | Includes support so you can control whether
Auto VPN configuration enables or disables the Remove
Private AS setting for all BGP peer groups on a branch
or hub. |
2.0.1 | 10.0.3 | Latest | Includes support for full mesh VPN cluster with
DDNS service, auto-VPN configuration with branch behind NAT, and
Direct Internet Access (DIA) AnyPath. |
2.0.0 | 10.0.2 | Latest | Maintain high-quality application experience
by leveraging Forward Error Correction (FEC) and packet duplication
and by accurately measuring SaaS and Cloud applications when you
have an SD-WAN firewall with Direct Internet Access (DIA) links. |
1.0.4 | 9.1.4 | Latest | In an SD-WAN VPN cluster that has more than
one hub, you must assign a priority to each hub, which determines
the primary hub and hub failover order. Panorama maps the priority
to a BGP local preference and pushes the local preference to the
branches in the cluster. |
1.0.3 | 9.1.3 | 10.0.0 | When the SD-WAN hub is behind a NAT device,
the plugin supports an upstream NAT IP address or FQDN for Auto
VPN configuration to use as a tunnel endpoint. |
1.0.2 | 9.1.2-h1 | 9.1.3 | Improves ease of use, such as an automatic
Security policy rule to allow BGP between branches and hubs, ability
to refresh the IKE preshared key for VPN cluster members, specifying
VPN tunnel IP address ranges, and more. |
1.0.1 | 9.1.1 | 9.1.2 | Improves monitoring experience and search
filtering, and adds an option to display HA peers consecutively. |
1.0.0 | 9.1.0 | 9.1.2 | Enables support for SD-WAN from Panorama.
Configure the Panorama plugin for SD-WAN to provide intelligent and
dynamic path selection on top of the industry-leading security that
PAN-OS software already delivers. Provide the optimal end user experience
by leveraging multiple ISP links to ensure application performance
and scale capacity. |
VMware NSX
Review the features introduced in each version of the
VM-Series firewall VMware NSX plugin.
The following table shows the features introduced in
each version of the VM-Series firewall VMware NSX plugin.
For additional information about each plugin, see the release notes
on the Customer Support Portal.
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Minimum Managed VM-Series PAN-OS Version | New Features or Changes |
---|---|---|---|---|
3.2.0 |
| Latest |
| Introduces Security Policy Extension Between NSX-V
and NSX-T and Device Certificate Support on the VM-Series for NSX. The
following VM-Series firewall for NSX OVFs require that you enable device certificates.
|
3.1.0 | 9.1.0 | Latest |
| Introduces the VM-Series firewall on VMware
NSX-T for East-West traffic protection. |
2.0.6 | 8.1.0 | 9.0.x | 8.1.0 | Introduces fixes for known issues. |
2.0.5 | 8.1.0 | 9.0.x | 8.1.0 | Introduces Proxy Bypass Support and Curl Call
Timeout features. |
2.0.4 | 8.1.0 | 9.0.x | 8.1.0 | Introduces the Automated Full Dynamic Address Group
Sync feature. |
2.0.3 | 8.1.0 | 9.0.x | 8.1.0 | Introduces fixes for known issues. |
2.0.2 | 8.1.0 | 9.0.x | 8.1.0 | Introduces fixes for known issues. |
2.0.1 | 8.1.0 | 9.0.x | 8.1.0 | Introduces fixes for known issues. Minimum
required plugin version for Panorama 8.1. |
VMware vCenter
Learn about the Panorama™ plugin for VMware vCenter.
The following table shows the features introduced in
each version of the Panorama™ plugin for VMware vCenter.
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
1.0.0 | 9.0.2 | Latest | Enables support for VM Monitoring from Panorama.
Configure the Panorama plugin for VMware vCenter to monitor VM workloads
so that you can consistently enforce security policy that automatically
adapts to changes within your vCenter environment. |
Zero Touch Provisioning (ZTP)
Learn about the Panorama™ plugin for Zero Touch Provisioning
(ZTP).
The following table shows the features introduced in
each version of the Panorama™ plugin for Zero Touch Provisioning (ZTP).
Plugin Version | Minimum Panorama Version | Maximum Panorama Version | Features |
---|---|---|---|
1.0.1 | 10.0.3 | Latest | No new features were added for this release. |
1.0.0 | 9.1.4 | Latest | Enables support for ZTP from Panorama. Configure
the Panorama plugin for ZTP to simplify and streamline initial
firewall deployment by automating the new managed firewall on-boarding
without the need for network administrators to manually provision
the firewall. |
Recommended For You
Recommended Videos
Recommended videos not found.