Compatibility Matrix
Palo Alto Networks Next-Generation Firewalls
Table of Contents
Expand All
|
Collapse All
Compatibility Matrix
-
- CN-Series Firewalls
- MFA Vendor Support
-
- Cloud Identity Engine Cipher Suites
-
- PAN-OS 11.2 GlobalProtect Cipher Suites
- PAN-OS 11.2 IPSec Cipher Suites
- PAN-OS 11.2 IKE and Web Certificate Cipher Suites
- PAN-OS 11.2 Decryption Cipher Suites
- PAN-OS 11.2 Administrative Session Cipher Suites
- PAN-OS 11.2 HA1 SSH Cipher Suites
- PAN-OS 11.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.1 GlobalProtect Cipher Suites
- PAN-OS 11.1 IPSec Cipher Suites
- PAN-OS 11.1 IKE and Web Certificate Cipher Suites
- PAN-OS 11.1 Decryption Cipher Suites
- PAN-OS 11.1 Administrative Session Cipher Suites
- PAN-OS 11.1 HA1 SSH Cipher Suites
- PAN-OS 11.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 11.0 GlobalProtect Cipher Suites
- PAN-OS 11.0 IPSec Cipher Suites
- PAN-OS 11.0 IKE and Web Certificate Cipher Suites
- PAN-OS 11.0 Decryption Cipher Suites
- PAN-OS 11.0 Administrative Session Cipher Suites
- PAN-OS 11.0 HA1 SSH Cipher Suites
- PAN-OS 11.0 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 11.0 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.2 GlobalProtect Cipher Suites
- PAN-OS 10.2 IPSec Cipher Suites
- PAN-OS 10.2 IKE and Web Certificate Cipher Suites
- PAN-OS 10.2 Decryption Cipher Suites
- PAN-OS 10.2 Administrative Session Cipher Suites
- PAN-OS 10.2 HA1 SSH Cipher Suites
- PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 10.1 GlobalProtect Cipher Suites
- PAN-OS 10.1 IPSec Cipher Suites
- PAN-OS 10.1 IKE and Web Certificate Cipher Suites
- PAN-OS 10.1 Decryption Cipher Suites
- PAN-OS 10.1 Administrative Session Cipher Suites
- PAN-OS 10.1 HA1 SSH Cipher Suites
- PAN-OS 10.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode
-
- PAN-OS 9.1 GlobalProtect Cipher Suites
- PAN-OS 9.1 IPSec Cipher Suites
- PAN-OS 9.1 IKE and Web Certificate Cipher Suites
- PAN-OS 9.1 Decryption Cipher Suites
- PAN-OS 9.1 Administrative Session Cipher Suites
- PAN-OS 9.1 HA1 SSH Cipher Suites
- PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites
- PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode
- Prisma Access
- Prisma SD-WAN
- Strata Cloud Manager and Panorama Feature Parity
- User-ID Agent
- Terminal Server (TS) Agent
- Strata Logging Service Software Compatibility
- Cortex XDR
- Endpoint Security Manager (ESM)
- IPv6 Support by Feature
- Mobile Network Infrastructure Feature Support
Palo Alto Networks Next-Generation Firewalls
Find out which PAN-OS® releases are currently supported
for each Palo Alto Networks firewall model.
The following table shows the PAN-OS® releases supported for each of the Palo Alto Networks
Next-Generation Firewall
hardware
, VM-Series
, and CN-Series
models. You can also review
PAN-OS support for PA-7000 Series cards and PA-5450 firewall cards as well as
for Palo Alto Networks appliances.|
Palo Alto Networks Firewall Model
|
PAN-OS 9.1
|
PAN-OS 10.1
|
PAN-OS 10.2
|
PAN-OS 11.0
|
PAN-OS 11.1
|
PAN-OS 11.2
|
|---|---|---|---|---|---|---|
|
Hardware Firewalls
| ||||||
|
PA-220 Firewall
|
√
|
√
|
√
|
—
|
—
|
—
|
|
PA-220R Firewall
|
√
|
√
|
√
|
—
|
—
|
—
|
|
PA-410 Firewall
|
—
|
√
10.1.2 & later
|
√
|
√
|
√
|
√
|
|
PA-410R Firewall
|
—
|
—
|
—
|
—
|
√
11.1.3 & later
|
√
|
|
PA-410R-5G Firewall
|
—
|
—
|
—
|
—
|
√
11.1.4 & later
|
√
|
|
PA-415-5G Firewall
|
—
|
—
|
—
|
—
|
√
|
√
|
|
PA-415 and PA-445 Firewalls
|
—
|
—
|
—
|
√
|
√
|
√
|
|
PA-440, PA-450, and PA-460 Firewalls
|
—
|
√
|
√
|
√
|
√
|
√
|
|
PA-450R Firewall
|
—
|
—
|
—
|
—
|
√
|
√
|
|
PA-450R-5G
|
—
|
—
|
—
|
—
|
√
|
√
|
|
PA-455 Firewall
|
—
|
—
|
—
|
—
|
√
|
√
|
|
PA-455-5G
|
—
|
—
|
—
|
—
|
—
|
√
11.2.3 & later
|
|
PA-800 Series Firewalls
|
√
|
√
|
√
|
√
|
√
|
—
|
|
PA-1400 Series Firewalls
|
—
|
—
|
—
|
√
|
√
|
√
|
|
PA-3200 Series Firewalls
|
√
|
√
|
√
|
√
|
√
|
—
|
|
PA-3400 Series Firewalls
|
—
|
—
|
√
|
√
|
√
|
√
|
|
PA-5200 Series Firewalls
|
√
|
√
|
√
|
√
|
√
|
√
|
|
PA-5410, PA-5420, and PA-5430 Firewalls
|
—
|
—
|
√
|
√
|
√
|
√
|
|
PA-5440 Firewall
|
—
|
—
|
—
|
√
|
√
|
√
|
|
PA-5445 Firewall
|
—
|
—
|
—
|
—
|
√
|
√
|
|
PA-5450 Firewall
|
—
|
√
|
√
|
√
|
√
|
√
|
|
PA-7000 Series Firewalls
|
√
|
√
|
√
|
√
|
√
|
√
|
|
PA-7500 Firewall
|
—
|
—
|
—
|
—
|
√
|
√
|
|
VM-Series
Firewalls
| ||||||
|
Flexible vCPU Firewalls
(Up to 32 cores)
|
—
|
√
|
√
|
√
|
√
|
√
|
|
Flexible vCPU Firewalls
(Up to 64 cores)
|
—
|
—
|
√
|
√
|
√
|
√
|
|
VM-50 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-100 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-200 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-300 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-500 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-700 Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
VM-1000-HV Firewall
|
√
|
√
|
√
|
√
|
√
|
√
|
|
CN-Series
Firewall
| ||||||
|
CN-Series Small
CN-MGMT Mem: 2GB
CN-NGFW Mem: 2 to 2.5GB
|
—
|
√
|
√
|
√
|
√
|
√
|
|
CN-Series Medium
CN-MGMT Mem: 2GB
CN-NGFW Mem: 6GB
|
—
|
√
|
√
|
√
|
√
|
√
|
|
CN-Series Large
CN-MGMT Mem: 4GB
CN-NGFW Mem: 48GB
|
—
|
√
|
√
|
√
|
√
|
√
|
* You should also review the hardware EoL information for more specific
information about firewalls and appliances that have reached end-of-sale (EoS)
status.