Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.1 and
5.1.1 Features
Prisma Access 5.1 features require one of more of the following components
to function:
- Infrastructure Upgrade—The infrastructure, also known as the Prisma Access
Control Plane, includes the underlying service backend,
orchestration, and monitoring infrastructure. Prisma Access
upgrades the infrastructure before the general availability (GA) date of a
Prisma Access release.
Features that require only an
infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the
infrastructure upgrade.
- Plugin Upgrade (Prisma Access Panorama Managed Deployments
Only)—Installing the plugin activates the features that are
available with that release. You download and install the plugin on the
Panorama that manages Prisma Access.
- Dataplane Upgrade—The dataplane enables traffic inspection and
security policy enforcement on your network and user traffic.
For
Panorama Managed Prisma Access deployments, you can view your
dataplane version by going to and viewing the Prisma Access
Version. Prisma Access 5.1 Innovation runs
PAN-OS 11.2.
This dataplane upgrade to 5.1 Innovation is optional, and is
only required if you want to take advantage of the features that require a dataplane
upgrade.
These features are activated with the infrastructure upgrade for Prisma Access:
PAN-OS 11.2 Support for Panoramas that Manage Prisma Access 11.2
Calgary and South Africa Compute Locations
Explicit Proxy Support for South Africa Central Location
These features require an infrastructure and plugin upgrade but don't require
a dataplane upgrade:
Prisma Access 5.1 Features:
Prisma Access 5.1.1 Features: None
The following 5.1 features require an infrastructure and plugin upgrade and
require a minimum dataplane version of PAN-OS 10.2.4 unless otherwise noted, making
them Prisma Access 5.1 Preferred features:
Prisma Access 5.1 Features:
Prisma Access 5.1.1 Features:
- ZTNA Connector Application Discovery, User-ID Across NAT, and IP Connector Block
Deletion Support (User-ID Across NAT requires a minimum dataplane of 11.2 (5.1.1
Innovation)
The following 5.1 features require an infrastructure, plugin, and dataplane
upgrade to Prisma Access 11.2, making them Prisma Access 5.1 Innovation features:
Prisma Access 5.1 Features:
Advanced DNS Security
Business Continuity During Mergers and Acquisitions
Dynamic DNS Registration Support for Mobile Users—GlobalProtect
FQDNs for Remote Network and Service Connection IPSec Tunnels
GlobalProtect Portal and Gateway Support for TLSv1.3
IPSec Serviceability
PAN-OS 11.0, 11.1, and 11.2 Dataplane Support
Static IP Address Allocation for Mobile Users
User-ID Across NAT
Prisma Access 5.1.1 Features:
- Native IPv6 Compatibility
- View and Monitor Native IPv6 Compatibility