VM-Series Firewall Hypervisor Support

The following table shows hypervisor version support on the VM-Series firewall.
Deployment
PAN-OS Version Support
Hypervisor Version Support
I/O Enhancement Support
Base Image Required from the Palo Alto Networks Support Portal
Private Cloud Deployments
VM-Series for VMware vSphere Hypervisor (ESXi)
(without VMware NSX)
PAN-OS 7.1
PAN-OS 8.1
PAN-OS 9.0
5.1 (
not supported on PAN-OS 9.0
), 5.5 and 6.0
PA-VM-ESX-7.1.0.ova
PA-VM-ESX-8.1.0.ova
PA-VM-ESX-9.0.0.ova
PAN-OS 7.1
PAN-OS 8.1
PAN-OS 9.0
6.5
PAN-OS 8.0 and later:
  • SR-IOV
  • DPDK
PA-VM-ESX-7.1.0-u1.ova
PA-VM-ESX-8.1.0.ova
PA-VM-ESX-9.0.0.ova
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
6.7
  • SR-IOV
  • DPDK
PA-VM-ESX-8.1.0.ova
PA-VM-ESX-9.0.0.ova
PA-VM-ESX-9.1.0.ova
VM-Series for VMware NSX-V
vSphere with VMware NSX and Panorama
The combinations listed in this document have been approved by Palo Alto Networks. For versions of PAN-OS certified by VMware, see the VMware Compatibility Guide.
Panorama 8.0 and higher requires the VMware NSX plugin. For more information, see VMware NSX.
Available on all VM-Series models except the VM-50 and the VM-700.
PAN-OS 7.1
vSphere: 5.5
NSX Manager: 6.0, 6.1, and 6.2
PA-VM-NSX-7.1.0.zip
vSphere: 6.0 and 6.5a
NSX Manager: 6.1, 6.2, 6.3, and 6.4
PAN-OS 8.1 with NSX Plugin 2.0.2 or later
vSphere:
6.0 and 6.5
NSX Manager: 6.3.x and 6.4.0
LRO
PA-VM-NSX-8.1.0.zip
with
vmware_nsx-2.0.2
vSphere:
6.0, 6.5, and 6.7
NSX Manager: 6.4.1 and later
PAN-OS 9.0
with NSX Plugin 2.0.3 or later
vSphere:
6.0 and 6.5
NSX Manager: 6.3.x and 6.4.0
PA-VM-NSX-9.0.0.zip
with
vmware_nsx-2.0.3
vSphere:
6.0, 6.5, and 6.7
NSX Manager: 6.4.1 and later
VM-Series for VMware NSX-T
PAN-OS 9.0.4
vSphere:
6.5 P03 and later or 6.7 EP06 and later
NSX-T Manager:
2.4.0 and later
PA-VM-NST-9.0.4.zip
with
vmware_nsx-3.0.0
PAN-OS 9.1.0
vSphere: 6.7U2c or later and ESXI 6.7 U2 or later
NSX-T Manager: 2.5.0 and later
PA-VM-NST-9.1.0.zip
with
vmware_nsx-3.1.0
VM-Series for Citrix SDX
PAN-OS 7.1
SDX 10.1+
XenServer 6.0.2 and later
PAN-OS for VM-Series SDX Base Images
For example, the download-able image name is:
PA-VM-SDX-7.1.2.zip
PA-VM-SDX-8.0.0.zip
VM-Series for KVM
PAN-OS 7.1
  • Ubuntu: 12.04 LTS, 14.04 LTS, and 16.04 LTS
  • CentOS/Red Hat Enterprise Linux: 6.5, 7.0, 7.1, and 7.2
SR-IOV
PA-VM-KVM-7.1.0.qcow2
  • Ubuntu: 14.04 LTS and 16.04 LTS
  • CentOS/Red Hat Enterprise Linux: 7.2
  • DPDK
  • SR-IOV
PA-VM-KVM-8.1.0.qcow2
CentOS: 7.5
Packet MMAP mode support only; so you must disable DPDK with op-cmd-dpdk-pkt-io=off in the init-cfg.txt file used for bootstrapping or use the CLI command set system setting dpdk-pkt-io off)
PA-VM-KVM-8.1.3.qcow2
PA-VM-KVM-9.0.0.qcow2
PA-VM-KVM-9.1.0.qcow2
PAN-OS 9.0.3.xfr
CentOS: 7.6
Ubuntu: 18.04 LTS
DPDK
PA-VM-KVM-9.0.3.xfr.qcow2
PAN-OS 9.1.0
Ubuntu: 18.04 LTS
DPDK
PA-VM-KVM-9.1.0.qcow2
PAN-OS 8.1.3
PAN-OS 9.0.1
PAN-OS 9.0.3.xfr
PAN-OS 9.1.0
RHEL: 7.6
  • 8.1.3 - Packet MMAP/SR-IOV only
  • 8.1.10 - SR-IOV-DPDK only
  • 9.0.1 - Packet MMAP and SR-IOV only
  • 9.0.4 - SR-IOV-DPDK only
  • 9.0.3.xfr - Virtio/SR-IOVwith DPDK
PA-VM-KVM-8.1.3.qcow2
PA-VM-KVM-8.1.10.qcow2
PA-VM-KVM-9.0.1.qcow2
PA-VM-KVM-9.0.3.xfr.qcow2
PA-VM-KVM-9.0.4.qcow2
PA-VM-KVM-9.1.0.qcow2
VM-Series for Nutanix
PAN-OS 8.1.0
Layer 2, Layer 3, and virtual wire deployments
AHV
Nutanix AOS Version 5.1.5
Nutanix AHV Release 20160925.121
PA-VM-8.1.0.qcow2
PAN-OS 8.1.2
Layer 3 deployments only
AHV
Nutanix AOS Version 5.5.4 and later
Nutanix AHV Release 20170830.156S
Packet MMAP support for Layer 3 deployment. You must disable DPDK with
op-cmd-dpdk-pkt-io=off
in the init-cfg.txt file used for bootstrapping or use the CLI command
set system setting dpdk-pkt-io off
.
PA-VM-8.1.0.qcow2
and upgrade to PAN-OS 8.1.2.
PAN-OS 8.1.3
Layer 3 deployments, and Virtual wire deployments with Service Chaining.
AHV
  • Nutanix AOS Version 5.9
    Nutanix AHV Release 20170830.171
  • Nutanix AOS Version 5.10
    Nutanix AHV Release 20170830.185
Packet MMAP support only. You must disable DPDK with
op-cmd-dpdk-pkt-io=off
in the init-cfg.txt file used for bootstrapping or use the CLI command
set system setting dpdk-pkt-io off
.
PA-VM-8.1.3.qcow2
PAN-OS 9.0.0
PAN-OS 9.1.0
Layer 3 deployments, and virtual wire deployments with Service Chaining.
AHV
Nutanix AOS Version 5.10
Nutanix AHV Release 20170830.185
Packet MMAP support only. You must disable DPDK with
op-cmd-dpdk-pkt-io=off
in the init-cfg.txt file used for bootstrapping or use the
set system setting dpdk-pkt-io off
CLI command.
PA-VM-9.0.0.qcow2
PA-VM-9.1.0.qcow2
VM-Series for Hyper-V
PAN-OS 7.1
PAN-OS 8.1
PAN-OS 9.0
  • Windows Server 2012 R2 with Hyper-V role or Hyper-V 2012 R2
  • Windows Server 2016 with Hyper-V role or Hyper-V 2016
PAN-OS for VM-Series Hyper-V Base Images
For example, the download-able image name is:
PA-VM-HPV-7.1.0.vhdx
PA-VM-HPV-8.1.0.vhdx
PA-VM-HPV-9.0.0.vhdx
VM-Series for OpenStack
PAN-OS 7.1.12
PAN-OS 8.1
KVM: Ubuntu 14.04
OpenStack: Mirantis 8.0 with Contrail 3.2
PAN-OS for VM-Series KVM Base Images
PA-VM-KVM-7.1.12.qcow2
PA-VM-KVM-8.1.0.qcow2
PAN-OS 8.1
PAN-OS 9.0
Redhat
OpenStack Newton 10
Virtio only
PAN-OS for VM-Series KVM Base Images
PA-VM-KVM-8.1.0.qcow2
PA-VM-KVM-9.0.0.qcow2
PAN-OS 9.0.3
PAN-OS 9.0.3.xfr
Redhat OpenStack Queens 13
  • 9.0.3 - Packet MMAP and SR-IOV only
  • 9.0.3.xfr - Virtio/SR-IOV with DPDK
PAN-OS for VM-Series KVM Base Images
PA-VM-KVM-9.0.3.qcow2
PA-VM-KVM-9.0.3
.xfr.qcow2
Hardware and VM-Series Firewalls in Cisco ACI
Managed Mode only:
PAN-OS 7.1
ACI: 2.3 and 3.0
N/A
Device Package 1.3
Unmanaged Mode only:
PAN-OS 8.1
PAN-OS 9.0
ACI: 2.3(1e), 3.1, and 3.2
N/A
Panorama Plugin for Cisco ACI
cisco-1.0.0
Unmanaged Mode only:
PAN-OS 8.1
PAN-OS 9.0
ACI: 2.3(1e), 3.1, 3.2, and 4.0 and later
N/A
Panorama Plugin for Cisco ACI
cisco-1.0.1
Public Cloud Deployments
VM-Series on AWS
PAN-OS 7.1
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
N/A
PAN-OS 8.0 and later: DPDK is supported in addition to SR-IOV, but is disabled by default.
PAN -OS 9.0.x where x is less than or equal to 3, DPDK is supported on all except C5 and M5 instances; only SR-IOV is supported.
PAN -OS 9.0.3.xfr supports both DPDK and SR-IOV for all instance types, but DPDK is disabled by default.
N/A
VM-Series on vCloud Air
PAN-OS 7.1
PAN-OS 8.1
N/A
PAN-OS for VM-Series Base Images
For example, the download-able image name is:
PA-VM-ESX-7.1.0.ova
PA-VM-ESX-8.0.0.ova
PA-VM-ESX-8.1.0.ova
VM-Series on Azure
List of supported Azure Regions.
PAN-OS 7.1
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
N/A
DPDK is not supported
N/A
VM-Series on Google Cloud
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
N/A
DPDK is supported and enabled by default
N/A
VM-Series on Oracle Cloud Infrastructure
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
N/A
Packet MMAP support only. DPDK is enabled by default and must be disabled.
PAN-OS for VM-Series KVM Base Images
PA-VM-KVM-8.1.0.qcow2
PA-VM-KVM-9.0.0.qcow2
PA-VM-KVM-9.1.0.qcow2
VM-Series on Alibaba Cloud
PAN-OS 8.1
PAN-OS 9.0
PAN-OS 9.1
N/A
DPDK and Packet MMAP are supported. DPDK is enabled by default.
PAN-OS for VM-Series KVM Base Images
PA-VM-KVM-8.1.3.qcow2
PA-VM-KVM-9.0.0.qcow2
PA-VM-KVM-9.1.0.qcow2

Recommended For You