: Palo Alto Networks Certified Integrations
Focus
Focus

Palo Alto Networks Certified Integrations

Table of Contents

Palo Alto Networks Certified Integrations

Review the Palo Alto Networks certified partner interoperability index for VM-Series firewalls.
The following topic shows the Palo Alto Networks certified partner products with which VM-Series firewalls interoperate. Refer to the tables for details about hardware platforms and software versions on which you can deploy the VM-Series firewall.
The partner software version and the PAN-OS® version columns display the range of versions and the minimum version in parentheses. For example, where the PAN-OS Version column displays
PAN-OS 10.1.x (
10.1.4
)
, it indicates that the integration supports PAN-OS 10.1 releases beginning with PAN-OS 10.1.4.

Ciena

The following table shows the Ciena products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
SAOS Supported Software Version
(
Minimum
)
SAOS Tested Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
3906mvi and 3926mvi
KVM
18.x.x (
18.06.00
)
18.06.x (
18.06.00
)
9.1.x (
9.1.0
)
Layer 3 mode on the VM-50, VM-100, and VM-300
VirtIO and DPDK mode.

Cisco Cloud Services Platform

The following table shows the Cisco Cloud Services Platform (CSP) products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
CSP Supported Software Version
(
Minimum
)
CSP Tested Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
CSP 5228
Megaport (KVM)
2.6.x (
2.6.1
)
2.6.x (
2.6.1
)
10.2.x (
10.2.0
)
Layer 3
VM-Series Firewalls in an HA configuration
SR-IOV, Packet MMAP, and DPDK mode
CSP 5200 Series
KVM
2.6.x (
2.6.1
)
2.6.x (
2.6.1
)
10.2.x (
10.2.0
)
Layer 2, Layer3, Virtual wire deployments on all VM-Series models except VM-50
VM-Series Firewalls in an HA configuration
SR-IOV, Packet MMAP, and DPDK mode
CSP 5400 Series
4.6.x (
4.6
)
4.6.x (
4.6.1-FC1
)
10.1.x (
10.1.0
)
CSP 5400 Series
CSP 2100 Series
2.x.x (
2.4.0
)
2.4.x (
2.4.0
)
9.1.x (
9.1.0
)

Cisco Enterprise Computer System (ENCS)

The following table shows the Cisco Enterprise Computer System (ENCS) products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
NFVIS Supported Software Version
(
Minimum
)
Tested
NFVIS Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
Cisco 5400 Series
KVM
4.6.x (
4.6
)
4.6.x (
4.6.1-FC1
)
10.1.x (
10.1.0
)
  • Layer 2, Layer3, Virtual wire deployments
  • Firewalls in HA
  • Virtio with DPDK mode enabled by default
3.x.x (
3.8
)
4.6.x (
4.6.1-FC1
)
3.10.x (
3.10.1
)
3.12.x (
3.12.1
)
4.6.x (
4.6.1-FC1
)
9.1.x (
9.1.0
)

Citrix SD-WAN

The following table shows the Citrix SD-WAN products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
Supported Software Version (
Minimum
)
Tested
Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
Citrix SD-WAN 1100 Appliance
KVM
11.x.x (
11.0.1
)
11.0.x (
11.0.1
)
9.1.x (
9.1.0
)
Virtual wire deployments
VirtIO with packet MMAP mode support only; so you must disable DPDK with
op-cmd-dpdk-pkt-io=off
in the
init-cfg.txt
file used for bootstrapping or use the CLI command
set system setting dpdk-pkt-io off
9.1.x (
9.1.0
)
Virtual wire
DPDK Mode

Juniper NFX Network Services Platform

The following table shows the Juniper NFX Network Services Platform products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
Junos Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
NFX 250
KVM
15.1X53-D470.x
(
15.1X53-D470.5
)
9.1.x (
9.1.0
)
Layer 2, Layer 3, Virtual Wire
DPDK mode

NSX SD-WAN by VeloCloud

The following table shows the NSX SD-WAN by VeloCloud products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
VCE Supported Software Version
(
Minimum
)
Tested VCE Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
Edge 520v
Edge 840
KVM
3.x.x (
3.2.0
)
3.3.x (
3.3.1
)
9.1.x (
9.1.0
)
Virtual wire deployments
DPDK

Nuage Networks

The following table shows the Nuage Networks products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
VSP Supported Software Version (
Minimum
)
Tested VSP Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
Nuage NSG-X series
5.x.x (
5.3.3U3
)
5.3.x (
5.3.3U3
)
TBD
Virtual wire deployments on VM-50 and VM-100 models
VirtIO with packet MMAP mode support only
DPDK must be disabled: If you bootstrap, include
op-cmd-dpdk-pkt-io=off
in the
init-cfg.txt
file, or, on the VM Series firewall, use the CLI command
set system setting dpdk-pkt-io off

Versa Networks

The following table shows the Versa Networks products with which VM-Series firewalls interoperate.
Hardware
Hypervisor
Supported Versa FlexVNF Software Version
(
Minimum
)
Tested Versa FlexVNF Software Version
(
Minimum
)
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
Versa 930 (Dell VEP4600)
KVM
21.x.x (
21.1.2
)
21.1.x (
21.1.2
)
9.1.x (
9.1.0
)
Virtual wire, L3 deployments with DPDK

Vyatta

The following table shows the Vyatta products with which VM-Series firewalls interoperate.
Platform
Hypervisor
Vyatta Software Version
PAN-OS Version
(
Minimum
)
Deployment Modes Supported
Documentation
AT&T vRouter 5600
KVM
19.x (
1903f
)
9.1.x (
9.1.0
)
Virtual wire, L2, L3 deployments with DPDK
VM-50, VM-100, and VM-300

Recommended For You