Prisma Access and Panorama Version Compatibility
Table of Contents
Expand all | Collapse all
-
- Cloud Identity Engine Cipher Suites
-
- PAN-OS 11.1 GlobalProtect Cipher Suites
- PAN-OS 11.1 IPSec Cipher Suites
- PAN-OS 11.1 IKE and Web Certificate Cipher Suites
- PAN-OS 11.1 Decryption Cipher Suites
- PAN-OS 11.1 Administrative Session Cipher Suites
- PAN-OS 11.1 HA1 SSH Cipher Suites
- PAN-OS 11.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.0 GlobalProtect Cipher Suites
- PAN-OS 11.0 IPSec Cipher Suites
- PAN-OS 11.0 IKE and Web Certificate Cipher Suites
- PAN-OS 11.0 Decryption Cipher Suites
- PAN-OS 11.0 Administrative Session Cipher Suites
- PAN-OS 11.0 HA1 SSH Cipher Suites
- PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.2 GlobalProtect Cipher Suites
- PAN-OS 10.2 IPSec Cipher Suites
- PAN-OS 10.2 IKE and Web Certificate Cipher Suites
- PAN-OS 10.2 Decryption Cipher Suites
- PAN-OS 10.2 Administrative Session Cipher Suites
- PAN-OS 10.2 HA1 SSH Cipher Suites
- PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.1 GlobalProtect Cipher Suites
- PAN-OS 10.1 IPSec Cipher Suites
- PAN-OS 10.1 IKE and Web Certificate Cipher Suites
- PAN-OS 10.1 Decryption Cipher Suites
- PAN-OS 10.1 Administrative Session Cipher Suites
- PAN-OS 10.1 HA1 SSH Cipher Suites
- PAN-OS 10.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 9.1 GlobalProtect Cipher Suites
- PAN-OS 9.1 IPSec Cipher Suites
- PAN-OS 9.1 IKE and Web Certificate Cipher Suites
- PAN-OS 9.1 Decryption Cipher Suites
- PAN-OS 9.1 Administrative Session Cipher Suites
- PAN-OS 9.1 HA1 SSH Cipher Suites
- PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 8.1 GlobalProtect Cipher Suites
- PAN-OS 8.1 IPSec Cipher Suites
- PAN-OS 8.1 IKE and Web Certificate Cipher Suites
- PAN-OS 8.1 Decryption Cipher Suites
- PAN-OS 8.1 Administrative Session Cipher Suites
- PAN-OS 8.1 HA1 SSH Cipher Suites
- PAN-OS 8.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 8.1 Cipher Suites Supported in FIPS-CC Mode
Prisma Access and Panorama Version Compatibility
Learn about the version compatibility between Prisma™
Access (Panorama™ Managed) and Panorama.
This section provides you with the minimum and maximum
versions of Panorama™ to use with Prisma™ Access, along with the end-of-service
(EoS) dates for Panorama software versions with Prisma Access.
Minimum Required Panorama Software Versions
The Cloud Services plugins require the following minimum
Panorama™ software versions.
Due to the fast-paced release of Prisma Access and the
Cloud Services plugin, the software end-of-support
(EoS) dates for Panorama appliances used to manage Prisma
Access can differ from the software end-of-life (EoL) dates for
PAN-OS and Panorama releases. Note that these exceptions apply only
to Panorama version compatibility with Prisma Access.
For FedRAMP deployment required Panorama versions, see Panorama Managed Prisma Access
FedRAMP Requirements.
Cloud Services Plugin Version | Minimum Required Panorama Version |
---|---|
5.0 Preferred and Innovation |
|
4.0 and 4.1. Preferred |
You must have a Panorama appliance running a minimum version of
10.2 to take advantage of the 10.2 features in Prisma
Access. |
3.2.1 Preferred |
|
3.2.1 Innovation |
|
3.2 Preferred |
|
3.2 Innovation |
|
3.1 Preferred |
|
3.1 Innovation | PAN-OS 10.2.3 or a later PAN-OS 10.2 version. PAN-OS
10.1.3 or a later PAN-OS 10.1 version. If using a PAN-OS 10.1
version, you should upgrade your PAN-OS software to PAN-OS 10.1.4
or a later PAN-OS 10.1 version to incorporate an addressed issue (CYR-19816) that resolves
a known issue found in earlier PAN-OS 10.1 versions. |
3.0 |
|
2.2 Preferred |
|
End-of-Support (EoS) Dates for Panorama Software Version
Compatibility with Prisma Access
When Prisma™ Access upgrades its infrastructure and
dataplane after a major release, the upgrades can become incompatible
with earlier Panorama™ versions. Because of the fast-paced release
of Prisma Access and the Cloud Services plugin, the software compatibility end-of-support
(EoS) dates for Panorama can differ from the software end-of-life
dates for Panorama releases and apply to Panorama version compatibility
with Prisma Access only.
If the Panorama appliance that manages Prisma Access is running
a software version that is incompatible (not supported) with the
upgrades, you must upgrade Panorama to a compatible version to take
full advantage of the capabilities of the infrastructure and dataplane
upgrades. It is our goal to make this process as seamless as possible
and, for this reason, we make every effort to provide you with adequate
notice of Panorama and Prisma Access version compatibility requirements.
Use the dates in the following table to learn when a Panorama
software version that manages Prisma Access is no longer compatible
with Prisma Access so that you can plan an upgrade to a supported
version prior to the EoS date.
Due to the fast-paced release of Prisma Access and the
Cloud Services plugin, the software compatibility end-of-support
(EoS) dates for Panorama appliances used to manage Prisma Access
can differ from the software end-of-life (EoL) dates for PAN-OS
and Panorama releases. Note that these exceptions apply only to
Panorama version compatibility with Prisma Access.
To find the latest EoS compatibility information
for your Panorama software with Prisma Access, log in to the Panorama
appliance that manages Prisma Access, select the Service Setup page
(),
and view the
Panorama
Cloud Services
Configuration
Service Setup
Panorama Alert
information.
(See Notifications and Alerts for
Panorama, Cloud Services Plugin, and PAN-OS Dataplane Versions for
details.)Panorama Software Version | EoS Dates for Prisma Access Deployments |
---|---|
PAN-OS 10.0 | March 1, 2023 |
PAN-OS 9.1 | August 1st, 2022 Before this date,
you must upgrade your Panorama to PAN-10.0 or a later supported
(with Prisma Access) PAN-OS version. PAN-OS 10.1 is supported
only after you upgrade to 2.2 Preferred or to the following 2.1 plugins:
|
The Panorama upgrade is required regardless of the Cloud Services
plugin version you are running at the EoS date. You cannot continue
using an earlier version of the Cloud Services plugin with an earlier
unsupported version of Panorama software.
The following Panorama software versions are already EoS and
you cannot use them with Prisma Access:
- PAN-OS 9.0—EoS on February 1, 2021