>
    Strata Copilot
    VM-Series Plugin
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. VM-Series Firewalls
    4. VM-Series Plugin
    Download PDF
    Compatibility Matrix

    VM-Series Plugin

    Table of Contents

    VM-Series Plugin

    View VM-Series plugin version compatibility.
    The VM-Series plugin is built in to the VM-Series firewalls. You can configure this plugin directly on the VM-Series firewall or install it on a Panorama™ M-Series or virtual appliance.
    To manage the VM-Series plugin configuration on your managed firewalls from Panorama, you must manually install the VM-Series plugin on Panorama. Refer to Panorama Plugins. You can also compare VM-Series Plugin and Panorama Plugins.
    The following table briefly describes the features introduced in each version of the VM-Series plugin. For additional information about each version, refer to the VM-Series plugin release notes.

    VM-Series Plugin 5.1.x

    VM-Series plugin 5.1 versions are compatible with PAN-OS 11.1 releases. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    5.1.911.2.8, 11.1.11
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.711.2.6
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.611.2.5
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.411.1.5
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.3—
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.111.2.0
    Includes new fixes to improve your experience with the VM-Series firewall.
    5.1.011.2.0Introduces reduced maximum session count on the VM-Series firewall.
    This is the minimum required plugin version for the VM-Series on PAN-OS 11.2.0.

    VM-Series Plugin 5.0.x

    VM-Series plugin 5.0 versions are compatible with PAN-OS 11.1 releases. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    5.0.7Includes fix to a known issue.
    5.0.6Includes fixes to known issues.
    5.0.2—Introduces changes in the maximum session count on the VM-Series firewall and fixes to internally identified issues.
    5.0.1—Introduces reduced maximum session count on the VM-Series firewall.
    5.0.011.1.0Includes fixes to known issues.

    VM-Series Plugin 4.0.x

    VM-Series plugin 4.0 versions are compatible with PAN-OS 11.0 releases. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    4.0.811.0.5Includes fixes to known issues.
    4.0.7—Includes fixes to known issues.
    4.0.5—Introduces improvements to Google Cloud Platform IPS, powered by Palo Alto Networks.
    4.0.4—Introduces reduced maximum session count on the VM-Series firewall and improvements to Google Cloud Platform IPS, powered by Palo Alto Networks.
    4.0.3-h1—Includes a fix to one issue.
    4.0.3—Includes fixes to known issues.
    4.0.211.0.2Includes fixes to known issues.
    4.0.111.0.1Includes fixes to known issues.
    4.0.011.0.0Introduces support for Advanced Routing on the VM-Series firewall.

    VM-Series Plugin 3.0.x

    VM-Series plugin 3.0 versions are compatible with PAN-OS 10.2 releases. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    3.0.14
    10.2.17
    		Addresses known issues.
    3.0.13
    10.2.14
    		Addresses known issues.
    3.0.12
    10.2.14
    		Addresses known issues.
    3.0.11
    10.2.14
    		Addresses known issues.
    3.0.10
    10.2.13
    		Addresses known issues.
    3.0.9
    10.2.11
    		Addresses known issues.
    3.0.8
    10.2.10
    		Addresses known issues.
    3.0.6
    10.2.8
    		Addresses known issues.
    3.0.5-h1—Introduces reduced maximum session count on the VM-Series firewall.
    3.0.5
    10.2.5
    		Addresses known issues.
    3.0.4
    10.2.4
    		Addresses known issues.
    3.0.310.2.3Addresses known issues and introduces two new features—Configuring OCI CloudWatch monitoring and Publishing custom metrics in the OCI console.
    3.0.2
    10.2.2
    		Addresses known issues.
    3.0.1
    10.2.1
    		Introduces one new feature—PAYG License Support for VM-Series on AWS, OCI, GCP and Azure.
    3.0.0
    10.2.0
    		Addresses known issues.

    VM-Series Plugin 2.1.x

    VM-Series plugin 2.1 versions are compatible with PAN-OS 10.1 releases. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    2.1.17
    10.1.14
    Introduces fixes for issues.
    2.1.16
    —
    Introduces fixes for issues.
    2.1.15
    —
    Introduces fixes for issues.
    2.1.14
    10.1.11
    Introduces fixes for issues.
    2.1.13
    10.1.10
    Introduces fixes for issues.
    2.1.12
    —
    Introduces fixes for issues.
    2.1.11
    —
    		Introduces two new features—Full Bootstrap Support for the VM-Series on OCI and HA Support for the VM-Series on OCI in FIPS mode.
    2.1.10
    10.1.9-h1
    Introduces fixes for issues.
    2.1.9
    10.1.9
    Introduces fixes for issues.
    2.1.8
    —
    Addresses known issues and introduces two new features—Configuring OCI CloudWatch monitoring and Publishing custom metrics in the OCI console.
    2.1.7
    10.1.7
    Introduces fixes for issues.
    2.1.6
    10.1.6
    Introduces fixes for issues.
    2.1.5
    10.1.5
    Introduces fixes for issues.
    2.1.4
    10.1.4
    Introduces one new feature—Limit the number of vCPUs licensed and used by a VM-Series firewall.
    2.1.3
    10.1.3
    Addresses a known issue.
    2.1.2
    10.1.2
    Introduces two new features—Bootstrapping support for NUMA Performance Optimization and Azure Stack API Endpoint Access.
    2.1.1
    10.1.1
    Introduces two new features—NUMA Performance Optimization and Six-Core Support for Intelligent Traffic Offload.
    2.1.010.1.0
    Default VM-Series plugin for PAN-OS 10.1.0.

    VM-Series Plugin 2.0.x

    VM-Series plugin 2.0 versions are compatible only with PAN-OS 9.1. The following table describes new features or changes introduced in each plugin version and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    2.0.7
    9.1.10
    10.0.6*
    		Introduces management interface swap support for the VM-Series on VMware ESXi and KVM and addresses known issues.
    2.0.6
    9.1.9
    10.0.5*
    		Addresses a known issue.
    2.0.5—
    Addresses known issues and adds 1500 MTU for Google Cloud Platform and SR-IOV access mode on ESXi with PAN-OS 9.1.5 and later or 10.0.1 and later.
    2.0.4
    10.0.4*
    		Addresses known issues and adds licensing support for future PAN-OS releases.
    2.0.3
    10.0.3*
    • Introduces custom image creation for the VM-Series firewall on Microsoft Azure.
    • Introduces Pay-As-You-Go license support for the VM-Series on Oracle Cloud Infrastructure.
    • Introduces enhancements for the VM-Series firewall on Alibaba Cloud.
    • Addresses known issues.
    2.0.2
    9.1.6
    9.1.7
    9.1.8
    10.0.2*
    • Introduces shared storage on AWS, Azure and GCP. Supports subdirectories within cloud storage, enabling you to store multiple bootstrap files in one storage bucket.
    • Introduces support for secure bootstrap on AWS.
    • Change in default behavior: VM-Series plugin now uses HTTPS to communicate with the AWS CloudWatch endpoint.
    • Addresses known issues.
    2.0.1
    10.0.1*
    • Introduces AWS active-passive high availability using a secondary IP address.
    • Change in default behavior: In new VM-Series deployments on AWS, the default Packet IO mode is DPDK.
    • Introduces bootstrapping with user data on AWS, Azure, and GCP.
    • Introduces bootstrapping VLAN access mode on SR-IOV for VM-Series firewall on KVM only. Requires PAN-OS 9.1.5 and later, or 10.0.1 and later.
    • Addresses known issues.
    2.0.0
    10.0.0*
    Addresses known issues.
    *PAN-OS 10.0 reached end-of-life (EoL) status on July 16, 2022.

    VM-Series Plugin 1.0.x

    VM-Series plugin 1.0 versions are compatible with PAN-OS 9.0 and PAN-OS 9.1 releases. The following table describes new features or changes introduced in each plugin versions and the VM-Series PAN-OS base image that includes each version of the plugin.
    VM-Series Plugin VersionIncluded in PAN-OS Base ImageNew Features or Changes
    1.0.13
    9.0.14
    9.0.13
    9.0.12
    9.0.11
    Addresses known issues.
    1.0.12
    9.1.4
    9.1.5
    • Additional PAN-OS custom metrics for AWS, Azure, and GCP public clouds (panSessionConnectionsPerSecond, panSessionThroughputKbps, and panSessionThroughputPps).
    • New system startup updates, system health periodic updates, and live health failure updates for AWS CloudWatch.
    • Addresses known issues.
    1.0.11
    9.0.8
    9.0.9
    9.0.10
    9.1.2
    9.1.3
    Introduces Deeper Visibility with AWS CloudWatch Enhancement and addresses known issues.
    1.0.10
    		—
    Addresses known issues on AWS.
    1.0.9
    		—Introduces support for Oracle Cloud Infrastructure marketplace deployment and high availability for the VM-Series firewall, and addresses known issues. PAN-OS 9.1.1 is required to use these OCI features.
    1.0.8
    9.1.0
    9.1.1
    Addresses known issues.
    Default VM-Series plugin version for PAN-OS 9.1.
    1.0.7—
    Addresses known issues, including bug fixes and support for high availability (HA) on Azure Government for the VM-Series on Azure.
    Earliest version on which you can enable (HA) on Azure Government for the VM-Series on Azure.
    1.0.6
    		—
    Introduces support for the VM-Series firewall on NSX-T (North-South) and addresses known issues.
    1.0.5—
    Introduces the PAN-OS accelerated feature releases (images with .xfr in the filename*) for only VM-Series firewalls to enable support for new features and bug fixes; also addresses known issues.
    PAN-OS 9.0.4 requires plugin 1.0.5 or later.
    *All PAN-OS 9.0-xfr releases are end-of-life (EoL) as of September 19, 2020.
    1.0.4
    		—
    Addresses known issues.
    1.0.3—
    Addresses known issues.
    If you want to enable management interface swap on GCP or AWS platforms and you are running PAN-OS 9.0.2, you must install VM-Series plugin 1.0.3 or later.
    1.0.2
    		—
    Addresses known issues.
    1.0.0—
    Enables publishing metrics for supported public clouds: AWS, Azure, and Google Cloud Platform.
    Default VM-Series plugin version for PAN-OS 9.0.

    © 2026 Palo Alto Networks, Inc. All rights reserved.