Home

Location

Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base

Home
PAN-OS
PAN-OS ® New Features Guide
Certificate Management Features

Last Updated:

Jul 23, 2022

Current Version:

10.0 (EoL)

Version 11.0
Version 10.0 (EoL)

End-of-Life (EoL)

Table of Contents

Filter

Upgrade PAN-OS

Upgrade/Downgrade Considerations

Upgrade the Firewall to PAN-OS 10.0

Determine the Upgrade Path to PAN-OS 10.0

Upgrade Firewalls Using Panorama

Upgrade a Standalone Firewall

Upgrade an HA Firewall Pair

Downgrade PAN-OS

Downgrade a Firewall to a Previous Maintenance Release

Downgrade a Firewall to a Previous Feature Release

Downgrade a Windows Agent

Enterprise Data Loss Prevention Features

Enterprise Data Loss Prevention

SD-WAN Features

SD-WAN Remove Private AS

SD-WAN Full Mesh VPN Cluster with DDNS Service

SD-WAN DIA AnyPath

SaaS Application Path Monitoring

SD-WAN Forward Error Correction

SD-WAN Packet Duplication

IoT Security Features

IoT Security

Device-ID

Content Inspection Features

DNS Security Signature Categories

Enhanced Pattern-Matching Engine for Custom Signatures

IPS Signature Converter Plugin for Panorama

Expanded Data Collection for DNS Security Improvements

Decryption Features

Decryption for TLSv1.3

Block Export of Private Keys

Enhanced Decryption Troubleshooting

GlobalProtect Features

Identification and Quarantine of Compromised Devices

Enhanced Logging for the Selected GlobalProtect Gateway

Management Features

Millisecond Granularity for PAN-OS Log Forwarding

Visibility on Custom Threat Names

Proxy Support for Cortex Data Lake

External Dynamic List Log Fields

Additional Predefined Time Filters for the ACC, Monitoring, and Reports

Rule Usage Filtering Actions

Device Telemetry

Certificate Management Features

Master Key Encryption Enhancement

Panorama Features

Automatic Content Updates Through Offline Panorama

Enhanced Authentication for Dedicated Log Collectors and WildFire Appliances

Syslog Forwarding Using Ethernet Interfaces

Increased Configuration Size for Panorama

Access Domain Enhancements for Multi-Tenancy

Enhanced Performance for Panorama Query and Reporting

Log Query Debugging

Configurable Key Limits in Scheduled Reports

Multiple Plugin Support for Panorama

Networking Features

HA Clustering

HA Additional Path Monitoring Groups

Packet Buffer Protection Based on Latency

Ethernet SGT Protection

ECMP Strict Source Path

Tunnel Acceleration for GRE, VXLAN, and GTP-U Tunnels

Advanced Route Engine

Bonjour Reflector for Network Segmentation

Authentication Features

TLS Encryption for Email Server Profiles

Authentication Portal Exclusion for Predefined Domains

User-ID Features

Streamlined and Resilient Redistribution

Authentication with Custom Certificates for Redistribution

Policy Features

IP Range and Subnet Support in Dynamic Address Groups

X-Forwarded-For HTTP Header Data Support in Policy

URL Filtering Features

URL Filtering Inline ML

WildFire Features

WildFire Real-Time Signature Updates

IPv6 Address Support for the WildFire Appliance

Windows 10 Analysis Environment for the WildFire Appliance

WildFire Inline ML

Virtualization Features

Automatic Site License Activation on the PAYG VM-Series Firewalls

CN-Series Firewalls for Securing Kubernetes Deployments

Panorama Support for Multiple IP-Tag Sources

VMotion Support for the VM-Series Firewall on NSX-T and ESXi

Mobile Infrastructure Security Features

Network Slice Security in a 5G Network

Equipment ID Security in a 5G Network

Subscriber ID Security in a 5G Network

Equipment ID Security in a 4G Network

Subscriber ID Security in a 4G Network

Upgrade PAN-OS
Enterprise Data Loss Prevention Features
- Enterprise Data Loss Prevention
SD-WAN Features
IoT Security Features
- IoT Security
- Device-ID
Content Inspection Features
Decryption Features
GlobalProtect Features
- Identification and Quarantine of Compromised Devices
- Enhanced Logging for the Selected GlobalProtect Gateway
Management Features
Certificate Management Features
- Master Key Encryption Enhancement
Panorama Features
Networking Features
Authentication Features
- TLS Encryption for Email Server Profiles
- Authentication Portal Exclusion for Predefined Domains
User-ID Features
- Streamlined and Resilient Redistribution
- Authentication with Custom Certificates for Redistribution
Policy Features
- IP Range and Subnet Support in Dynamic Address Groups
- X-Forwarded-For HTTP Header Data Support in Policy
URL Filtering Features
- URL Filtering Inline ML
WildFire Features
Virtualization Features
Mobile Infrastructure Security Features

Document:PAN-OS ® New Features Guide

Certificate Management Features

Last Updated:

Jul 23, 2022

Current Version:

10.0 (EoL)

Version 11.0
Version 10.0 (EoL)

Table of Contents

Filter

Upgrade PAN-OS

Upgrade/Downgrade Considerations

Upgrade the Firewall to PAN-OS 10.0

Determine the Upgrade Path to PAN-OS 10.0

Upgrade Firewalls Using Panorama

Upgrade a Standalone Firewall

Upgrade an HA Firewall Pair

Downgrade PAN-OS

Downgrade a Firewall to a Previous Maintenance Release

Downgrade a Firewall to a Previous Feature Release

Downgrade a Windows Agent

Enterprise Data Loss Prevention Features

Enterprise Data Loss Prevention

SD-WAN Features

SD-WAN Remove Private AS

SD-WAN Full Mesh VPN Cluster with DDNS Service

SD-WAN DIA AnyPath

SaaS Application Path Monitoring

SD-WAN Forward Error Correction

SD-WAN Packet Duplication

IoT Security Features

IoT Security

Device-ID

Content Inspection Features

DNS Security Signature Categories

Enhanced Pattern-Matching Engine for Custom Signatures

IPS Signature Converter Plugin for Panorama

Expanded Data Collection for DNS Security Improvements

Decryption Features

Decryption for TLSv1.3

Block Export of Private Keys

Enhanced Decryption Troubleshooting

GlobalProtect Features

Identification and Quarantine of Compromised Devices

Enhanced Logging for the Selected GlobalProtect Gateway

Management Features

Millisecond Granularity for PAN-OS Log Forwarding

Visibility on Custom Threat Names

Proxy Support for Cortex Data Lake

External Dynamic List Log Fields

Additional Predefined Time Filters for the ACC, Monitoring, and Reports

Rule Usage Filtering Actions

Device Telemetry

Certificate Management Features

Master Key Encryption Enhancement

Panorama Features

Automatic Content Updates Through Offline Panorama

Enhanced Authentication for Dedicated Log Collectors and WildFire Appliances

Syslog Forwarding Using Ethernet Interfaces

Increased Configuration Size for Panorama

Access Domain Enhancements for Multi-Tenancy

Enhanced Performance for Panorama Query and Reporting

Log Query Debugging

Configurable Key Limits in Scheduled Reports

Multiple Plugin Support for Panorama

Networking Features

HA Clustering

HA Additional Path Monitoring Groups

Packet Buffer Protection Based on Latency

Ethernet SGT Protection

ECMP Strict Source Path

Tunnel Acceleration for GRE, VXLAN, and GTP-U Tunnels

Advanced Route Engine

Bonjour Reflector for Network Segmentation

Authentication Features

TLS Encryption for Email Server Profiles

Authentication Portal Exclusion for Predefined Domains

User-ID Features

Streamlined and Resilient Redistribution

Authentication with Custom Certificates for Redistribution

Policy Features

IP Range and Subnet Support in Dynamic Address Groups

X-Forwarded-For HTTP Header Data Support in Policy

URL Filtering Features

URL Filtering Inline ML

WildFire Features

WildFire Real-Time Signature Updates

IPv6 Address Support for the WildFire Appliance

Windows 10 Analysis Environment for the WildFire Appliance

WildFire Inline ML

Virtualization Features

Automatic Site License Activation on the PAYG VM-Series Firewalls

CN-Series Firewalls for Securing Kubernetes Deployments

Panorama Support for Multiple IP-Tag Sources

VMotion Support for the VM-Series Firewall on NSX-T and ESXi

Mobile Infrastructure Security Features

Network Slice Security in a 5G Network

Equipment ID Security in a 5G Network

Subscriber ID Security in a 5G Network

Equipment ID Security in a 4G Network

Subscriber ID Security in a 4G Network

Upgrade PAN-OS
Enterprise Data Loss Prevention Features
- Enterprise Data Loss Prevention
SD-WAN Features
IoT Security Features
- IoT Security
- Device-ID
Content Inspection Features
Decryption Features
GlobalProtect Features
- Identification and Quarantine of Compromised Devices
- Enhanced Logging for the Selected GlobalProtect Gateway
Management Features
Certificate Management Features
- Master Key Encryption Enhancement
Panorama Features
Networking Features
Authentication Features
- TLS Encryption for Email Server Profiles
- Authentication Portal Exclusion for Predefined Domains
User-ID Features
- Streamlined and Resilient Redistribution
- Authentication with Custom Certificates for Redistribution
Policy Features
- IP Range and Subnet Support in Dynamic Address Groups
- X-Forwarded-For HTTP Header Data Support in Policy
URL Filtering Features
- URL Filtering Inline ML
WildFire Features
Virtualization Features
Mobile Infrastructure Security Features

End-of-Life (EoL)

Certificate Management Features

Learn about the new Certificate Management features that are included with this new release.

Master Key Encryption Enhancement

Most Popular

Recommended For You

Recommended Videos

Recommended videos not found.

© 2023 Palo Alto Networks, Inc. All rights reserved.