>
    Strata Copilot
    Palo Alto Networks Certified Integrations
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. VM-Series Firewalls
    4. Partner Interoperability for VM-Series Firewalls
    5. Palo Alto Networks Certified Integrations
    Download PDF
    Compatibility Matrix

    Palo Alto Networks Certified Integrations

    Table of Contents

    Palo Alto Networks Certified Integrations

    Review the Palo Alto Networks certified partner interoperability index for VM-Series firewalls.
    Review these lists to see the Palo Alto Networks certified partner products with which VM-Series firewalls can interoperate. The tables include details about hardware platforms and software versions on which you can deploy a VM-Series firewall.
    The partner software version and the PAN-OS® version columns display the range of versions and the minimum version in parentheses. For example, if the PAN-OS Version column displays PAN-OS 10.1.x (10.1.4), then integration support begins with PAN-OS 10.1 but not until PAN-OS 10.1.4. and later PAN-OS versions.

    Ciena

    The following table shows the Ciena products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    SAOS Supported Software Version
    (Minimum)
    SAOS Tested Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    3906mvi and 3926mvi
    KVM
    18.x.x (18.06.00)
    18.06.x (18.06.00)
    9.1.x (9.1.0)
    Layer 3 mode on the VM-50, VM-100, and VM-300
    VirtIO and DPDK mode.
    		Ciena documentation

    Cisco Cloud Services Platform

    The following table shows the Cisco Cloud Services Platform (CSP) products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    		CSP Supported Software Version
    (Minimum)
    CSP Tested Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    CSP 5228
    Megaport (KVM)
    2.6.x (2.6.1)
    2.6.x (2.6.1)
    10.2.x (10.2.0)
    Layer 3
    VM-Series Firewalls in an HA configuration
    SR-IOV, Packet MMAP, and DPDK mode
    Set Up the VM-Series Firewall on Cisco CSP (PAN-OS 10.2)
    Megaport Documentation
    CSP 5200 Series
    KVM
    2.6.x (2.6.1)
    2.6.x (2.6.1)
    10.2.x (10.2.0)
    Layer 2, Layer3, Virtual wire deployments on all VM-Series models except VM-50
    VM-Series Firewalls in an HA configuration
    SR-IOV, Packet MMAP, and DPDK mode
    Set Up the VM-Series Firewall on Cisco CSP (PAN-OS 10.2)
    CSP 5400 Series
    4.6.x (4.6)
    4.6.x (4.6.1-FC1)
    10.1.x (10.1.0)
    Set Up the VM-Series Firewall on Cisco CSP (PAN-OS 10.1)
    CSP 5400 Series
    CSP 2100 Series
    2.x.x (2.4.0)
    2.4.x (2.4.0)
    9.1.x (9.1.0)
    Set Up the VM-Series Firewall on Cisco CSP (PAN-OS 9.1)

    Cisco Enterprise Computer System (ENCS)

    The following table shows the Cisco Enterprise Computer System (ENCS) products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    		NFVIS Supported Software Version
    (Minimum)
    		Tested
    NFVIS Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    Cisco 5400 Series
    KVM
    4.12.x (4.12)
    4.12.x (4.12)
    11.1.x (11.1.0)
    • Layer 2, Layer3, Virtual wire deployments
    • Firewalls in HA
    • Virtio with DPDK mode enabled by default
    		VM-Series on Cisco ENCS
    4.12.x (4.12)
    4.12.x (4.12)
    10.2.x (10.2.0)
    4.6.x (4.6)
    4.6.x (4.6.1-FC1)
    10.1.x (10.1.0)
    3.x.x (3.8)
    4.6.x (4.6.1-FC1)
    3.10.x (3.10.1)
    3.12.x (3.12.1)
    4.6.x (4.6.1-FC1)
    9.1.x (9.1.0)
    For PAN-OS 11.1.x, you must use the NFVIS CLI to upload the PAN-OS image. The PAN-OS file size exceeds the file size limit of the ENCS UI.

    Citrix SD-WAN

    The following table shows the Citrix SD-WAN products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    		Supported Software Version (Minimum)Tested
    Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    Citrix SD-WAN 1100 Appliance
    KVM
    11.x.x (11.0.1)
    11.0.x (11.0.1)
    9.1.x (9.1.0)
    Virtual wire deployments
    VirtIO with packet MMAP mode support only; so you must disable DPDK with op-cmd-dpdk-pkt-io=off in the init-cfg.txt file used for bootstrapping or use the CLI command set system setting dpdk-pkt-io off
    9.1.x (9.1.0)
    Virtual wire
    DPDK Mode

    Juniper NFX Network Services Platform

    The following table shows the Juniper NFX Network Services Platform products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    Junos Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    NFX 350
    KVM
    24.2r1-s1.10
    11.2.x (11.2.5)
    Layer 2, Layer 3, Virtual Wire
    DPDK mode
    Juniper NFX documentation
    NFX 250
    KVM
    24.2r1-s1.10
    11.2.x (11.2.5)
    Layer 2, Layer 3, Virtual Wire
    DPDK mode
    Juniper NFX documentation
    NFX 250
    KVM
    15.1X53-D470.x
    (15.1X53-D470.5)
    9.1.x (9.1.0)
    Layer 2, Layer 3, Virtual Wire
    DPDK mode
    Juniper NFX documentation

    NSX SD-WAN by VeloCloud

    The following table shows the NSX SD-WAN by VeloCloud products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    		VCE Supported Software Version
    (Minimum)
    Tested VCE Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    Edge 520v
    Edge 840
    KVM
    3.x.x (3.2.0)
    3.3.x (3.3.1)
    9.1.x (9.1.0)
    Virtual wire deployments
    DPDK
    NSX SD-WAN by VeloCloud documentation

    Nuage Networks

    The following table shows the Nuage Networks products with which VM-Series firewalls interoperate.
    Hardware
    Hypervisor
    		VSP Supported Software Version (Minimum)
    Tested VSP Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    Nuage NSG-X series
    —
    5.x.x (5.3.3U3)
    5.3.x (5.3.3U3)
    TBD
    Virtual wire deployments on VM-50 and VM-100 models
    VirtIO with packet MMAP mode support only
    DPDK must be disabled: If you bootstrap, include op-cmd-dpdk-pkt-io=off in the init-cfg.txt file, or, on the VM Series firewall, use the CLI command set system setting dpdk-pkt-io off
    		Nuage Networks documentation

    Proxmox

    The following table shows the Proxmox products with which VM-Series firewalls interoperate.
    HardwareHypervisorSupported Software Version (Minimum)
    Tested Software Version (Minimum)
    PAN-OS Version (Minimum)
    		Deployment Modes SupportedHardware Documentation
    Proxmox 9.0Linux6.14.8-212.1.312.1 onwardsKVMDocumentation

    Versa Networks

    The following table shows the Versa Networks products with which VM-Series firewalls interoperate.
    Hardware
    		Hypervisor
    Supported Versa FlexVNF Software Version
    (Minimum)
    Tested Versa FlexVNF Software Version
    (Minimum)
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    Versa 930 (Dell VEP4600)
    KVM
    		21.x.x (21.1.2)21.1.x (21.1.2)9.1.x (9.1.0)
    Virtual wire, L3 deployments with DPDK
    		Versa Documentation

    Vyatta

    The following table shows the Vyatta products with which VM-Series firewalls interoperate.
    Platform
    Hypervisor
    Vyatta Software Version
    PAN-OS Version
    (Minimum)
    Deployment Modes Supported
    Documentation
    AT&T vRouter 5600
    KVM
    		19.x (1903f)
    9.1.x (9.1.0)
    Virtual wire, L2, L3 deployments with DPDK
    VM-50, VM-100, and VM-300
    —

    © 2026 Palo Alto Networks, Inc. All rights reserved.