Panorama Management Compatibility
Review the Panorama™ management server compatibility
based on the installed PAN-OS® version.
Review the table below to understand
which Palo Alto Networks Next-Generation Firewall, Dedicated Log
Collector, and WildFire® appliances a Panorama™ management server
can manage based on the installed PAN-OS version. Palo Alto Networks
recommends management of currently supported
Palo Alto Networks Next-Generation Firewalls, Dedicated
Log collector, and WildFire appliance running a supported PAN-OS
version.
(PAN-OS 10.2.6 and earlier releases) Panorama must be running the same or a
later PAN-OS version than the firewall it manages.
Dedicated Log Collectors must be running the same or later PAN-OS version than managed
firewalls from which logs are forwarded. Palo Alto Networks does not support forwarding
logs from managed firewalls to a Dedicated Log Collector if the Dedicated Log Collector
is running an earlier PAN-OS version than that installed on your managed firewalls. This
may lead to log forwarding and ingestion issues.
(PAN-OS 10.2.7 and later releases) Dedicated Log Collectors can receive logs
from firewalls running a higher version of PAN-OS within the same release train.
Panorama can manage a firewall running a higher version of PAN-OS within the same release
train. For example, a Panorama appliance running PAN-OS 10.2.7 can manage a firewall
running PAN-OS 10.2.8 or later 10.2 releases. Panorama does not support any new
features, optimizations, or platforms introduced in the later versions of PAN-OS or
installed plugins. For information on new features, see the
PAN-OS or
Plugin Release Notes. It is a best practice
that Panorama runs the same or a later PAN-OS version than the firewall it is managing.
Dedicated Log Collectors can receive logs from firewalls running a higher version of
PAN-OS within the same release train.
Despite these onboarding requirements, Panorama supports managing firewalls, Dedicated Log
Collectors, and WildFire appliances running the PAN-OS versions described below.
Management of
End-of-Life (EoL) PAN-OS versions may
result in unexpected issues, particularly if there is a large gap between the PAN-OS
version installed on Panorama and the one installed on the firewall. For example,
you may run into unexpected or unknown issues if you attempt to manage a firewall
running the EoL PAN-OS 7.1 release from a Panorama management server running PAN-OS
10.2 or a later version.
Panorama Version | Managed Device Version |
|---|
|
11.2
|
11.2
11.1
11.0
10.2
10.1
9.1
|
|
11.1
|
11.1
11.0
10.2
10.1
9.1
|
11.0 | 11.0 10.2 10.1 9.1 |
10.2 | 10.2 10.1 9.1 |
10.1 | 10.1 9.1 |
9.1 | 9.1 |
