Palo Alto Networks Compatibility Matrix
    : Prisma Access and Panorama Version Compatibility
    Focus
    Download PDF
    Focus
    1. Home
    2. Palo Alto Networks Compatibility Matrix
    3. Prisma Access
    4. Prisma Access and Panorama Version Compatibility
    Download PDF

    Palo Alto Networks Compatibility Matrix

    Prisma Access and Panorama Version Compatibility

    Table of Contents

    Prisma Access and Panorama Version Compatibility

    Learn about the version compatibility between Prisma™ Access (Panorama™ Managed) and Panorama.
    This section provides you with the minimum and maximum versions of Panorama™ to use with Prisma™ Access, along with the end-of-service (EoS) dates for Panorama software versions with Prisma Access.

    Minimum Required Panorama Software Versions

    The Cloud Services plugins require the following minimum Panorama™ software versions.
    Due to the fast-paced release of Prisma Access and the Cloud Services plugin, the software end-of-support (EoS) dates for Panorama appliances used to manage Prisma Access can differ from the software end-of-life (EoL) dates for PAN-OS and Panorama releases. Note that these exceptions apply only to Panorama version compatibility with Prisma Access.
    For FedRAMP deployment required Panorama versions, see Panorama Managed Prisma Access FedRAMP Requirements.
    Cloud Services Plugin Version
    Minimum Required Panorama Version
    5.0 Preferred and Innovation
    • PAN-OS 11.1
    • PAN-OS 11.0.0 or a later PAN-OS 11.0 version
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version
    • PAN-OS 10.1.7 or a later PAN-OS 10.1 version
      You must have a Panorama appliance running a minimum version of 10.2 to take advantage of the 10.2 features in Prisma Access.
    4.0 and 4.1. Preferred
    • PAN-OS 11.0.0 or a later PAN-OS 11.0 version
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version
    • PAN-OS 10.1.7 or a later PAN-OS 10.1 version
    You must have a Panorama appliance running a minimum version of 10.2 to take advantage of the 10.2 features in Prisma Access.
    3.2.1 Preferred
    • PAN-OS 11.0.0 or a later PAN-OS 11.0 version
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version
      Only Cloud Services plugin versions 3.2 and 3.1.0-h50 or later support a Panorama running 10.2.3 or later. Do not upgrade your Panorama to PAN-OS 10.2.3 until after you upgrade your Cloud Services plugin to these minimum versions. No 10.2 Panorama versions earlier than 10.2.3 are supported.
    • 10.1.7 or a later 10.1 version
    3.2.1 Innovation
    • PAN-OS 11.0
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version.
    • 10.1.7 or a later 10.1 version
    3.2 Preferred
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version.
      Only Cloud Services plugin versions 3.2 and 3.1.0-h50 or later support a Panorama running 10.2.3 or later. Do not upgrade your Panorama to PAN-OS 10.2.3 until after you upgrade your Cloud Services plugin to these minimum versions. No 10.2 Panorama versions earlier than 10.2.3 are supported.
    • 10.1.7 (
      10.1.8 recommended
      ) or a later 10.1 version
      While Panoramas running 10.1.7 are supported for use with 3.2, Palo Alto Networks recommends that you upgrade your Panorama to a minimum 10.1 version of 10.1.8 to support a future Panorama Managed Prisma Access release, to be released after the first quarter of calendar year 2023.
    3.2 Innovation
    • PAN-OS 10.2.3 or a later PAN-OS 10.2 version.
    • 10.1.7 or a later 10.1 version
    3.1 Preferred
    • PAN-OS 10.2.2-h1 or a later PAN-OS 10.2 version (
      minimum Cloud Services plugin version of 3.1.0-h50 required
      ).
      Only Cloud Services plugin version 3.1.0-h50 or later support a Panorama running 10.2.2-h1 or later. Do not upgrade your Panorama to PAN-OS 10.2.2-h1 until after you upgrade your Cloud Services plugin to this minimum version. No 10.2 Panorama versions earlier than 10.2.2-h1 are supported.
      Review the PAN-OS and Prisma Access Known Issues that are applicable to deployments with Panorama running PAN-OS 10.2.2 with Prisma Access 3.1.2.
    • PAN-OS 10.1.3 or a later PAN-OS 10.1 version.
      You should upgrade your PAN-OS software to PAN-OS 10.1.4 or a later PAN-OS 10.1 version to incorporate an addressed issue (CYR-19816) that resolves a known issue found in earlier PAN-OS 10.1 versions.
    • PAN-OS 10.0.7 or a later PAN-OS 10.0 version.
    3.1 Innovation
    PAN-OS 10.2.3 or a later PAN-OS 10.2 version.
    PAN-OS 10.1.3 or a later PAN-OS 10.1 version.
    If using a PAN-OS 10.1 version, you should upgrade your PAN-OS software to PAN-OS 10.1.4 or a later PAN-OS 10.1 version to incorporate an addressed issue (CYR-19816) that resolves a known issue found in earlier PAN-OS 10.1 versions.
    3.0
    • PAN-OS 10.1.2 or a later PAN-OS 10.1 version.
      FedRAMP Prisma Access deployments require Panorama running PAN-OS 10.1.8. Enabling the Processing Standard and Common Criteria (FIPS-CC mode) on the Panorama that manages Prisma Access is the recommended best practice aligned with FedRAMP controls.
      You should upgrade your PAN-OS software to PAN-OS 10.1.4 or a later PAN-OS 10.1 version to incorporate an addressed issue (CYR-19816) that resolves a known issue found in earlier PAN-OS 10.1 versions.
    • PAN-OS 10.0.7 or a later PAN-OS 10.0 version.
    2.2 Preferred
    • PAN-OS 10.1.
      FedRAMP Prisma Access deployments require Panorama running PAN-OS 10.1.8. Enabling the Processing Standard and Common Criteria (FIPS-CC mode) on the Panorama that manages Prisma Access is the recommended best practice aligned with FedRAMP controls.
      You should upgrade your PAN-OS software to PAN-OS 10.1.4 or a later PAN-OS 10.1 version to incorporate an addressed issue (CYR-19816) that resolves a known issue found in earlier PAN-OS 10.1 versions.
    • PAN-OS 10.0.5 or a later PAN-OS 10.0 version.

    End-of-Support (EoS) Dates for Panorama Software Version Compatibility with Prisma Access

    When Prisma™ Access upgrades its infrastructure and dataplane after a major release, the upgrades can become incompatible with earlier Panorama™ versions. Because of the fast-paced release of Prisma Access and the Cloud Services plugin, the software compatibility end-of-support (EoS) dates for Panorama can differ from the software end-of-life dates for Panorama releases and apply to Panorama version compatibility with Prisma Access only.
    If the Panorama appliance that manages Prisma Access is running a software version that is incompatible (not supported) with the upgrades, you must upgrade Panorama to a compatible version to take full advantage of the capabilities of the infrastructure and dataplane upgrades. It is our goal to make this process as seamless as possible and, for this reason, we make every effort to provide you with adequate notice of Panorama and Prisma Access version compatibility requirements.
    Use the dates in the following table to learn when a Panorama software version that manages Prisma Access is no longer compatible with Prisma Access so that you can plan an upgrade to a supported version prior to the EoS date.
    Due to the fast-paced release of Prisma Access and the Cloud Services plugin, the software compatibility end-of-support (EoS) dates for Panorama appliances used to manage Prisma Access can differ from the software end-of-life (EoL) dates for PAN-OS and Panorama releases. Note that these exceptions apply only to Panorama version compatibility with Prisma Access.
    To find the latest EoS compatibility information for your Panorama software with Prisma Access, log in to the Panorama appliance that manages Prisma Access, select the Service Setup page (
    Panorama
    Cloud Services
    Configuration
    Service Setup
    ), and view the
    Panorama Alert
     information. (See Notifications and Alerts for Panorama, Cloud Services Plugin, and PAN-OS Dataplane Versions for details.)
    Panorama Software Version
    EoS Dates for Prisma Access Deployments
    PAN-OS 10.0
    March 1, 2023
    PAN-OS 9.1
    August 1st, 2022
    Before this date, you must upgrade your Panorama to PAN-10.0 or a later supported (with Prisma Access) PAN-OS version.
    PAN-OS 10.1 is supported only after you upgrade to 2.2 Preferred or to the following 2.1 plugins:
    • 2.1.0-h24 Preferred
    • 2.1.0-h16 Innovation
    The Panorama upgrade is required regardless of the Cloud Services plugin version you are running at the EoS date. You cannot continue using an earlier version of the Cloud Services plugin with an earlier unsupported version of Panorama software.
    The following Panorama software versions are already EoS and you cannot use them with Prisma Access:
    • PAN-OS 9.0
      —EoS on February 1, 2021

    Recommended For You

    © 2023 Palo Alto Networks, Inc. All rights reserved.