>
    Strata Copilot
    System Requirements for SD-WAN
    Focus
    Download PDF
    Focus
    1. Home
    2. SD-WAN
    3. System Requirements for SD-WAN
    Download PDF
    SD-WAN

    System Requirements for SD-WAN

    Table of Contents

    System Requirements for SD-WAN

    Software and resource requirement for Panorama™ plugin for SD-WAN.
    Where Can I Use This?What Do I Need?
    • NGFW
    Review the minimum software versions, plugin versions, and resource requirements for the Panorama™ plugin for SD-WAN.
    Beginning with PAN-OS 11.0, you can configure advanced routing for SD-WAN with plugin version 3.1.
    If your Panorama management server runs a version newer than PAN-OS® 10.1 (such as PAN-OS 10.2) when you add a new device PAN-OS® 10.1 to SD-WAN cluster, the commit-all operation fails. To ensure a successful push, your Panorama and firewalls must run the same version for PAN-OS 10.1.x.
    The following table provides the plugin versions that are compatible with each other. We suggest you to use the Prisma Access cloud configuration plugin version with the corresponding compatible SD-WAN plugin version listed in the table, as the compatible versions contains new feature, bug fixes, or enhancements.
    Platform
    PAN-OS
    System Requirement
    Prisma Access Cloud Configuration Plugin
    SD-WAN Plugin
    Panorama
    		12.2.2
    • (Panorama virtual appliance) System Disk—224GB system disk
    • CPU—16 CPUs
    • Memory—64GB memory
    • System Mode—Panorama mode and Management Only mode
    • (M-Series Appliance in Management Only mode only) A 8TB RAID logging disk pair enabled
    The above information applies to a maximum of 500 managed devices. For information about using a maximum of 1,000 managed devices, refer to system requirements for the Panorama Virtual Appliance.
    6.2.0 is supported with PAN-OS 12.2.2; however, SD-WAN bandwidth-based path selection is not supported in this release. Do not upgrade to PAN-OS 12.2 if you rely on this feature with Prisma Access Cloud Configuration Plugin. Support is expected in a future release.
    		3.5.0
    12.1.86.1.0-h23.4.3
    12.1.76.1.0-h23.4.2
    12.1.56.1.0-h23.4.1
    12.1.26.0.0-h113.4.0
    11.2.10-h35.2.03.3.4-h1
    11.2.115.2.03.3.4
    11.2.7-h45.1.0-h213.3.3-h2
    11.2.5 or 11.2.4-h46.0.0-h33.3.3-h1
    11.2.55.2.03.3.3
    11.2.45.1.03.3.2
    11.2.35.1.0-h213.3.1
    11.2.05.0.0-h223.3.0
    11.1.135.2.03.2.4-h2
    11.1.10-h53.2.43.2.4-h1
    11.1.85.2.0-h293.2.4
    11.1.85.2.0-h293.2.3-h2
    11.1.8
    5.2.0-h29
    3.2.3-h1
    11.1.85.2.0-h293.2.3
    11.1.5
    5.1.0
    		3.2.2-h1
    11.1.55.1.03.2.2
    11.1.35.0.0-h313.2.1
    11.1.0
    4.0.0 and 5.0.0
    3.2.0
    11.0.45.0.0-h213.1.3
    11.0.3
    4.0.0 and 5.0.0
    3.1.2
    11.0.2
    4.0.0
    3.1.2
    11.0.24.0.03.1.1
    11.0.1
    11.0.1 is the recommended 11.0.x release.
    3.2.1.h21
    3.0.1-h6
    11.0.0
    3.2.1-h3
    3.1.0-h6
    10.2.16-h26.0.0-h273.0.9-h1
    10.2.16-h26.0.0-h273.0.9
    10.2.11
    5.1.0-h21
    3.0.8-h2
    10.2.115.1.0-h213.0.8
    10.2.84.0.0-h80, 4.1.0-h49, and 5.0.0-h93.0.7
    10.2.7
    4.0.0 and 5.0.0
    3.0.6
    10.2.6
    4.0.0
    3.0.6
    10.2.5
    4.0.0
    3.0.5
    10.2.4
    10.2.4 is the recommended 10.2.x release.
    3.2.1-h21
    3.0.4
    10.2.3
    3.2.1-h5
    3.0.4
    10.2.1
    Not supported in this release; expected in a future release. Do not upgrade to PAN-OS 11.1 if you are using SD-WAN with Prisma Access Cloud Configuration Plugin.
    3.0.1
    10.2.0
    3.0.0
    10.1.14-h25.1.02.2.7-h5
    10.1.13-h15.1.02.2.7
    10.1.11
    4.0.0 and 5.0.0
    2.2.6
    10.1.11
    4.0.0
    2.2.5
    10.1.10
    10.1.10 is the recommended 10.1.x release.
    4.0.0
    2.2.4
    10.1.9
    10.1.9 is the recommended 10.1.x release.
    		3.2.1-h5
    2.2.4
    10.1.8
    3.2.1-h5
    2.2.2
    10.1.5-h1
    2.1
    2.2.1
    10.1.0
    2.1
    2.2
    Next-Gen Firewall
    • PAN-OS 11.1—11.1.0
    • PAN-OS 11.0—11.0.0
    • PAN-OS 10.2—10.2.0
    • PAN-OS 10.1—10.1.4
    • PAN-OS 10.0—10.0.8
    N/A
    Prisma Access Compute Node
    10.0.7*
    * Prisma Access Compute Nodes (IPSec Termination Nodes) must run PAN-OS 10.0.7 or a later 10.0 release. If necessary, work with your sales team to request an upgrade before attempting to onboard a branch office to the Prisma Access hub.
    The following firewall models support SD-WAN software capabilities:
    • PA-220 and PA-220R
    • PA-400 Series
    • PA-820 and PA-850
    • PA-1400 Series
    • PA-3200 Series
    • PA-3400 Series
    • PA-5200 Series
    • PA-5400 Series
    • PA-7000 Series
    • VM-Series firewalls on public clouds (AWS, Azure, GCP, OCI, Nutanix, IBM) and private clouds (VMware ESXi, KVM hypervisor, and Nutanix)
    For more information about specific hardware availability, refer to the compatibility matrix.

    © 2026 Palo Alto Networks, Inc. All rights reserved.