PAN-OS provides network support for the HTTP/2 protocol using a CLI command on PAN-OS
11.2.8 and later releases.
Where Can I Use This?
What Do I Need?
NGFW (Managed by PAN-OS or Panorama)
PAN-OS 11.2.8 or later
The firewall management plane provides support for both HTTP/2 and HTTP/1.1 network
protocols on PAN-OS 11.2.8 or later releases. By default, and on all firewalls operating
earlier PAN-OS releases, HTTP/1.1 is enabled. When you manually enable HTTP/2, HTTP/1.1
is automatically disabled and includes no fallback capability. As such, you may need to
specify which protocol to use in environments with compatibility issues or if there are
security concerns requiring specific mitigation strategies.
HTTP/2 configuration enablement can only be performed through CLI using the following
commands:
