>
    Strata Copilot
    Software and Feature Prerequisites
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Release Information
    4. Software and Feature Prerequisites
    Download PDF
    Prisma Access

    Software and Feature Prerequisites

    Table of Contents

    Software and Feature Prerequisites

    Learn about the software and feature dependencies for Prisma Access 5.2.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • Prisma Access license
    • Minimum Required Prisma Access Version 5.2, 5.2.1, or 5.2.2 Preferred or Innovation
    This section provides you with the recommended software versions for Prisma Access 5.2, along with the minimum dataplane requirements for the new features.

    Recommended Software Versions for Prisma Access 5.2.2 Preferred and Innovation

    There are two Prisma Access 5.2.2 versions:
    • 5.2.2 Preferred runs a PAN-OS 10.2.4 dataplane. If your deployment is running a lower dataplane version, you should upgrade your dataplane to PAN-OS 10.2.4 to implement 5.2.2 Preferred features.
    • 5.2.2 Innovation runs on a PAN-OS 11.2.6 dataplane.
    For Prisma Access 5.2.2 features, Palo Alto Networks recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
    Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 5.2.2Recommended GlobalProtect VersionRecommended Panorama Version
    5.2.25.2.0 hotfixPAN-OS 10.2.4 (required for 5.2.2 Preferred)
    PAN-OS 11.2.6 (required for 5.2.2 Innovation)
    6.0.7+
    6.1.3+
    6.2.1+
    Minimum required versions for IPv6 Support for Public Apps for IP Optimization:
    • 6.2.6 client version for Windows and macOS
    • 6.2.7 for Linux
    • 6.1.7 for Android and IOS
    10.2.4+
    11.0.1+
    11.1.0+
    11.2.6+

    Recommended Software Versions for Prisma Access 5.2.1 Preferred and Innovation

    There are two Prisma Access 5.2.1 versions:
    • 5.2.1 Preferred runs a PAN-OS 10.2.4 dataplane. If your deployment is running a lower dataplane version, a dataplane upgrade to PAN-OS 10.2.4 might be required to implement 5.2.1 Preferred features.
    • 5.2.1 Innovation runs a PAN-OS 11.2.4 dataplane. An upgrade to PAN-OS 11.2.4 is required to implement 5.2 Innovation features.
    For new Prisma Access 5.2.1 Innovation features, Prisma Access recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
    Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 5.2.1Recommended GlobalProtect VersionRecommended Panorama Version
    5.2.15.2.0 hotfixPAN-OS 10.2.4 (required for 5.2.1 Preferred)
    PAN-OS 11.2.4 (required for 5.2.1 Innovation)
    6.0.7+
    6.1.3+
    6.2.1+
    10.2.4+
    11.0.1+
    11.1.0+
    11.2.4+

    Recommended Software Versions for Prisma Access 5.2 Preferred and Innovation

    There are two Prisma Access 5.2 versions:
    • 5.2 Preferred runs a PAN-OS 10.2.4 dataplane. If your deployment is running a lower dataplane version, a dataplane upgrade to PAN-OS 10.2.4 might be required to implement 5.2 Preferred features. If you're an existing customer, see Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.2.1 Preferred and Innovation Features to see if a dataplane upgrade is required for a Prisma Access 5.2 feature.
    • 5.2 Innovation runs a PAN-OS dataplane of 11.2.3. An upgrade to PAN-OS 11.2.3 is required to implement 5.2 Innovation features.
    For new Prisma Access 5.2 Innovation features, Prisma Access recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
    Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 5.2Recommended GlobalProtect VersionRecommended Panorama Version
    5.25.2PAN-OS 10.2.4 (required for 5.2 Preferred)
    PAN-OS 11.2.3 (required for 5.2 Innovation)
    6.0.7+
    6.1.3+
    6.2.1+
    10.2.4+
    11.0.1+
    11.1.0 +
    11.2.3+

    Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.2.2 Preferred and Innovation Features

    Prisma Access 5.2.2 features require one of more of the following components to function:
    • Infrastructure Upgrade—The infrastructure includes the underlying service backend, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
      Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
    • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)—Installing the plugin activates the features that are available with that release. You download and install the plugin on the Panorama that manages Prisma Access.
      Prisma Access 5.2.2 uses a hotfix version of the 5.2 Cloud Services plugin.
    • Dataplane Upgrade—The dataplane enables traffic inspection and Security policy enforcement on your network and user traffic.
      • For Prisma Access (Managed by Strata Cloud Manager), go to ManageConfigurationNGFW and Prisma AccessOverview.'
      • For Prisma Access (Managed by Panorama) deployments, you can view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version. Prisma Access 5.2.2 Preferred runs PAN-OS 10.2.4 and Prisma Access Innovation runs PAN-OS 11.2.6.
    A dataplane upgrade to 5.2.2 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
    These features are activated with the infrastructure upgrade only for Prisma Access:
    • None
    These 5.2.2 features require an infrastructure and plugin upgrade but don't require a dataplane upgrade to 10.2.10. A minimum dataplane version of 10.2.4 is required for these features:
    • IoT Device-ID Based Policies Support for Mobile Users
    These 5.2.2 features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 10.2.4, making them Prisma Access 5.2.2 Preferred features:
    • IPv6 Support for Public Apps for IP Optimization
    These 5.2.2 features require an infrastructure, plugin, and dataplane upgrade to PAN-OS 11.2.6, making them Prisma Access 5.2.2 Innovation features:
    • Proxy Chaining from Prisma Access Explicit Proxy to Third-Party Proxy
    • Prisma SASE 5G

    Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.2.1 Preferred and Innovation Features

    Prisma Access 5.2.1 features require one of more of the following components to function:
    • Infrastructure Upgrade—The infrastructure includes the underlying service backend, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
      Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
    • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)—Installing the plugin activates the features that are available with that release. You download and install the plugin on the Panorama that manages Prisma Access.
      Prisma Access (Managed by Panorama) releases 5.2 and 5.2.1 use the Cloud Services Plugin 5.2 Cloud Services plugin. Prisma Access 5.2.1 is activated using a hotfix version of the 5.2 plugin.
    • Dataplane Upgrade—The dataplane enables traffic inspection and security policy enforcement on your network and user traffic.
      • For Prisma Access (Managed by Strata Cloud Manager), go to ManageConfigurationNGFW and Prisma AccessOverview.'
      • For Prisma Access (Managed by Panorama) deployments, you can view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version. Prisma Access 5.2.1 Preferred runs PAN-OS 10.2.4 and Prisma Access Innovation runs PAN-OS 11.2.4.
    A dataplane upgrade to 5.2.1 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
    These features are activated with the infrastructure upgrade only for Prisma Access:
    • High-Performance Branch Sites Visibility
    • RFC6598 Mobile Users Address Pool for New Prisma Access (Managed by Strata Cloud Manager) Deployments
    • Route Table Visibility at Branch Sites and Service Connections
    • Israel and Saudi Arabia Strata Logging Service Region Support
    • Native IPv6 Support for Existing Prisma Access Deployments
    • View Access Agent in All Users
    These features require an infrastructure and plugin upgrade but don't require a dataplane upgrade. A minimum dataplane version of 10.2.4 is required for these features:
    • Explicit Proxy Support for Colo-Connect
    • Explicit Proxy Third-Party Enterprise Browser Integration
    The following 5.2.1 features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 10.2.4, making them Prisma Access 5.2.1 Preferred features:
    • None
    The following 5.2 features require an infrastructure, plugin, and dataplane upgrade to PAN-OS 11.2.4, making them Prisma Access 5.2.1 Innovation features:
    • Remote Network—High Performance Private App Access Support
    • Static IP Address Enhancements for Mobile Users

    Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 5.2 Preferred and Innovation Features

    Prisma Access 5.2 features require one of more of the following components to function:
    • Infrastructure Upgrade—The infrastructure includes the underlying service backend, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
      Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
    • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)—Installing the plugin activates the features that are available with that release. You download and install the plugin on the Panorama that manages Prisma Access.
    • Dataplane Upgrade—The dataplane enables traffic inspection and security policy enforcement on your network and user traffic.
      • For Prisma Access (Managed by Strata Cloud Manager), go to ManageConfigurationNGFW and Prisma AccessOverview.
      • For Prisma Access (Managed by Panorama) deployments, you can view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version. Prisma Access 5.2 Preferred runs PAN-OS 10.2.4 and Prisma Access Innovation runs PAN-OS 11.2.3.
    A dataplane upgrade to 5.2 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
    These features are activated with the infrastructure upgrade only for Prisma Access:
    • Simplify Prisma Access SaaS Connectivity with IP Optimization for Mobile Users and Explicit Proxy Deployments
    • TLS 1.3 and PubSub Support for Traffic Replication (PubSub support is added in Prisma Access 5.2.1)
    • View and Monitor Colo-Connect
    These features require an infrastructure and plugin upgrade but don't require a dataplane upgrade:
    • 25,000 Remote Network and 50,000 IKE Gateway Support
    • Private IP Address Visibility and Enforcement for Agent Based Proxy Traffic
    • IP Address Optimization for Explicit Proxy Users- Proxy Deployments
    • Simplified Prisma Access Private App Connectivity
    • View Prisma Access, Dataplane, and Application and Threats Content Versions in Strata Cloud Manager
    The following 5.2 features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 10.2.4, making them Prisma Access 5.2 Preferred features:
    • Remote Networks—High Performance
    The following 5.2 features require an infrastructure, plugin, and dataplane upgrade to Prisma Access 11.2.3, making them Prisma Access 5.2 Innovation features:
    • SC-NAT Support for Dynamic Privilege Access with CIAM
    • ZTNA Connector Support for Commitless App Onboarding

    © 2026 Palo Alto Networks, Inc. All rights reserved.