Software and Feature Prerequisites
Focus
Focus
Prisma Access

Software and Feature Prerequisites

Table of Contents

Software and Feature Prerequisites

Learn about the software and feature dependencies for Prisma Access 5.1.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Minimum Required Prisma Access Version 5.1 Preferred or Innovation
This section provides you with the recommended software versions for Prisma Access 5.1, along with the minimum dataplane requirements for the new features.

Recommended Software Versions for Prisma Access 5.1 and 5.1.1

There are two Prisma Access 5.1 versions:
  • 5.1 Preferred runs a PAN-OS 10.2.4, 10.2.9, or 10.2.10 dataplane, depending on the features you implement. If your deployment is running a lower dataplane version, a dataplane upgrade is required to implement 5.1 Preferred features.
  • 5.1 Innovation runs a PAN-OS dataplane of 11.2.
For new Prisma Access 5.1 Innovation features, Prisma Access recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 5.1Recommended GlobalProtect VersionRecommended Panorama Version
5.15.1PAN-OS 10.2.4 (required for 5.1 Preferred)
PAN-OS 11.2 (required for 5.1 Innovation)
6.0.7+
6.1.3+
6.2.1+
10.1.8+
10.2.4+
11.0.1+
11.1.0
11.2.0

Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.1 and 5.1.1 Features

Prisma Access 5.1 features require one of more of the following components to function:
  • Infrastructure Upgrade—The infrastructure, also known as the Prisma Access Control Plane, includes the underlying service backend, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
    Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
  • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)—Installing the plugin activates the features that are available with that release. You download and install the plugin on the Panorama that manages Prisma Access.
  • Dataplane Upgrade—The dataplane enables traffic inspection and security policy enforcement on your network and user traffic.
    For Panorama Managed Prisma Access deployments, you can view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version. Prisma Access 5.1 Innovation runs PAN-OS 11.2.
This dataplane upgrade to 5.1 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
These features are activated with the infrastructure upgrade for Prisma Access:
  • PAN-OS 11.2 Support for Panoramas that Manage Prisma Access 11.2
  • Calgary and South Africa Compute Locations
  • Explicit Proxy Support for South Africa Central Location
These features require an infrastructure and plugin upgrade but don't require a dataplane upgrade:
Prisma Access 5.1 Features:
  • Advanced Threat Prevention: Support for Zero-day Exploit Prevention
Prisma Access 5.1.1 Features: None
The following 5.1 features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 10.2.4 unless otherwise noted, making them Prisma Access 5.1 Preferred features:
Prisma Access 5.1 Features:
  • Explicit Proxy SAML Authentication Improvements (requires a minimum dataplane upgrade to PAN-OS 10.2.10)
  • Fast-Session Delete
  • GlobalProtect Proxy Enhancements
  • Prisma Access Internal Gateway
Prisma Access 5.1.1 Features:
  • ZTNA Connector Application Discovery, User-ID Across NAT, and IP Connector Block Deletion Support (User-ID Across NAT requires a minimum dataplane of 11.2 (5.1.1 Innovation)
The following 5.1 features require an infrastructure, plugin, and dataplane upgrade to Prisma Access 11.2, making them Prisma Access 5.1 Innovation features:
Prisma Access 5.1 Features:
  • Advanced DNS Security
  • Business Continuity During Mergers and Acquisitions
  • Dynamic DNS Registration Support for Mobile Users—GlobalProtect
  • FQDNs for Remote Network and Service Connection IPSec Tunnels
  • GlobalProtect Portal and Gateway Support for TLSv1.3
  • IPSec Serviceability
  • PAN-OS 11.0, 11.1, and 11.2 Dataplane Support
  • Static IP Address Allocation for Mobile Users
  • User-ID Across NAT
Prisma Access 5.1.1 Features:
  • Native IPv6 Compatibility
  • View and Monitor Native IPv6 Compatibility