VM-Series Plugin

View the VM-Series plugin version compatibility.
The VM-Series plugin is built in to the VM-Series firewalls. You can configure this plugin directly on the VM-Series firewall or install it on a Panorama™ M-Series or a virtual appliance.
To manage the VM-Series plugin configuration on your managed firewalls from Panorama, you must manually install the VM-Series plugin on Panorama. Refer to Panorama Plugins. You can also compare VM-Series Plugin and Panorama Plugins.
The following table briefly describes the features introduced in each version of the VM-Series plugin. For additional information about each version, refer to the VM-Series plugin release notes.

VM-Series Plugin 2.0.x

VM-Series Plugin versions 2.0.x and later are compatible with PAN-OS versions 9.1.x and 10.0.x.
VM-Series Plugin Version
New Features or Changes
Addresses known issues and adds licensing support for future PAN-OS releases.
  • Introduces custom image creation for the VM-Series firewall on Microsoft Azure.
  • Introduces Pay-As-You-Go license support for the VM-Series on Oracle Cloud Infrastructure.
  • Introduces enhancements for the VM-Series firewall on Alibaba Cloud.
  • Addresses known issues.
  • Introduces shared storage on AWS, Azure and GCP. Supports subdirectories within cloud storage, enabling you to store multiple bootstrap files in one storage bucket.
  • Introduces support for secure bootstrap on AWS.
  • Change in default behavior: VM-Series plugin now uses HTTPS to communicate with the AWS Cloudwatch endpoint.
  • Addresses known issues.
  • Introduces AWS active-passive high availability using a secondary IP address.
  • Change in default behavior: In new VM-Series deployments on AWS, the default Packet IO mode is DPDK.
  • Introduces bootstrapping with user data on AWS, Azure, and GCP.
  • Introduces bootstrapping VLAN access mode on SR-IOV. For VM-Series firewall on KVM only. Requires PAN-OS 9.1.5 and later, or 10.0.1 and later.
  • Addresses known issues.
Addresses known issues.

VM-Series Plugin 1.0.x

VM-Series Plugin versions 1.0.x and later are compatible with PAN-OS versions 9.1.x and 9.0.x.
VM-Series Plugin Version
New Features or Changes
Addresses known issues.
  • Additional PAN-OS custom metrics for AWS, Azure, and GCP public clouds (panSessionConnectionsPerSecond, panSessionThroughputKbps, and panSessionThroughputPps).
  • New system startup updates, system health periodic updates, and live health failure updates for AWS Cloudwatch.
  • Addresses known issues.
Introduces Deeper Visibility with AWS CloudWatch Enhancement and addresses known issues.
Addresses known issues on AWS.
Introduces support for Oracle Cloud Infrastructure marketplace deployment and high availability for the VM-Series firewall, and addresses known issues. PAN-OS 9.1.1 is required to use these OCI features.
Addresses known issues.
Default VM-Series plugin version for PAN-OS 9.1.
Addresses known issues, including bug fixes and support for high availability (HA) on Azure Government for the VM-Series on Azure.
Earliest version on which you can enable (HA) on Azure Government for the VM-Series on Azure.
Introduces support for the VM-Series firewall on NSX-T (North-South) and addresses known issues.
Introduces the PAN-OS accelerated feature releases (images with .xfr in the filename*) for only VM-Series firewalls to enable support for new features and bug fixes; also addresses known issues.
PAN-OS 9.0.4 requires plugin 1.0.5 or later.
*All PAN-OS 9.0-xfr releases are end-of-life (EoL) as of September 19, 2020.
Addresses known issues.
Addresses known issues.
If you want to enable management interface swap on GCP or AWS platforms and you are running PAN-OS 9.0.2, you must install VM-Series plugin 1.0.3 or later.
Addresses known issues.
Enables publishing metrics for supported public clouds: AWS, Azure, and Google Cloud Platform.
Default VM-Series plugin version for PAN-OS 9.0.

Recommended For You