>
    Strata Copilot
    Compatible Plugin Versions for PAN-OS 10.2
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. Associated Content and Software Versions
    4. Compatible Plugin Versions for PAN-OS 10.2
    Download PDF

    Compatible Plugin Versions for PAN-OS 10.2

    Table of Contents

    Compatible Plugin Versions for PAN-OS 10.2

    See which plugin versions are associated with PAN-OS 10.2.
    PAN OS 10.2 is enhanced with upgraded plugins to increase reliability and robustness.
    The following minimum plugin versions are compatible with PAN-OS 10.2.
    Plugin Name
    Minimum Compatible Plugin Version with PAN-OS 10.2
    AWS Plugin 4.0.0
    Azure Plugin4.0.0
    Cloud Services Plugin3.2.0
    Kubernetes Plugin3.0.0
    SW FW Licensing Plugin (VM licensing plugin and the previous version is supported)1.0.0
    Panorama VM-Series Plugin 3.0.0
    SD-WAN Plugin3.0.0
    IPS Signature Converter Plugin2.0.0
    ZTP Plugin2.0.0
    DLP Plugin3.0.0
    OpenConfig Plugin1.1.0
    GCP Plugin3.0.0
    Cisco ACI Plugin3.0.0
    VCenter Plugin2.0.0
    Nutanix Plugin2.0.0
    Cisco TrustSec Plugin2.0.0
    Important considerations for upgrading your plugins
    • The plugin versions listed in the above table are the only plugins that are compatible with PAN-OS 10.2. If you use any other plugins, you should not upgrade to PAN-OS 10.2 until you upgrade all plugins to the minimum version.
    • Starting with PAN-OS 10.2, the VM-Series plugin is installed by default. This option is currently available only in PAN OS 10.2, which means that Panorama software requires that you download a compatible version of the VM-Series plugin if you downgrade your firewall from PAN-OS 10.2.
    • Each upgraded Panorama plugin supports both existing firewalls and PAN OS 10.2 firewalls.
    • The VM-Series plugin is required only for Azure deployments and not for any other Panorama plugins.
    Supported Migration Paths for Plugins
    Plugin NameUpgrade/ DowngradeBase PAN-OSBase Plugin VersionTarget PAN-OSTarget Plugin Version
    AWSUpgrade10.1.x3.0.x
    AWS Plugin 2.x.x should be upgraded to 3.0.x in PAN OS 10.1.x before upgrading to PAN OS 10.2.0
    		10.2.04.0.0
    Downgrade10.2.04.0.010.1.x3.0.x
    Azure PluginUpgrade10.1.x3.1.x10.2.04.0.0
    Downgrade10.2.04.0.010.1.x3.2.X (yet to be released)
    Downgrading is not possible until the Azure Plugin 3.2.x is released.
    Kubernetes PluginUpgrade10.1.x2.0.x10.2.03.0.0
    Downgrade10.2.03.0.010.1.x2.0.x
    If you have a custom certificate size greater than 32k, the auto commit (which happens after downgrade) will fail. To avoid this, you can save the config file, add a dummy value in the custom certificate which is less than 16K and then downgrade to 2.0.x(k8s plugin cannot contact the API server). You can upgrade the plugin to 2.1.x (after release) and use the 32k original certificate.
    GCP PluginUpgrade10.1.x2.0.010.2.03.0.0
    Downgrade10.2.03.0.010.1.x2.0.0
    Cisco ACI PluginUpgrade10.1.x2.0.x10.2.03.0.0
    Downgrade10.2.03.0.010.1.x2.0.x
    VCenter PluginUpgrade10.1.x1.0.x10.2.02.0.0
    Downgrade10.2.02.0.010.1.x1.0.x
    Nutanix PluginUpgrade10.1.x1.0.010.2.02.0.0
    Downgrade10.2.02.0.010.1.x1.0.0
    For more information on upgrade and downgrade, see:

    © 2026 Palo Alto Networks, Inc. All rights reserved.