Management Features
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
-
-
-
-
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
-
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1
Management Features
What new management features are in PAN-OS 11.2?
Accelerate Insights and Enhance Security with Telemetry Autoenablement
August 2025
|
Telemetry autoenablement for Palo Alto
Networks devices streamlines the activation and configuration of telemetry,
eliminating complex workflows and manual setup. This feature ensures that upon
device onboarding, telemetry is automatically enabled and configured to stream data
to the correct data residency region, determined by your location or existing
configurations.
Strata Cloud Manager or hub now manages telemetry settings, rather than
individual Panorama or firewall devices. These services store information for all
devices within a tenant service group (TSG), simplifying and automating telemetry
configuration. This approach removes operational hurdles, enabling full utilization
of telemetry's benefits while maintaining control over data sharing preferences.
Consistent telemetry data streaming provides enhanced security, faster
security responses, and access to advanced features through critical threat
insights. Telemetry autoenablement ensures your devices send valuable diagnostic and
usage information, significantly improving support case resolution times and
offering real-time insights into performance, usage, and potential issues.
You have the ability to manage your telemetry settings at the TSG
level, including the option to change the telemetry tier from Full to Diagnostic
through the hub interface or Strata Cloud Manager. This tiered approach ensures you
can choose the level of information shared while adhering to data privacy
requirements. Additionally, all telemetry configuration changes are logged for audit
purposes, assisting with compliance and security policy adherence.
Configuration File Compression
May 2024
|
When you push a configuration change from Strata Cloud Manager, the XML configuration
file containing the existing and new configurations is pushed from Strata Cloud Manager
to your NGFW (Managed by Strata Cloud Manager). Strata Cloud Manager now compresses the pushed XML
configuration file exchanged by at least 15% if your NGFW (Managed by Strata Cloud Manager) is
running PAN-OS 11.2. All NGFW (Managed by Strata Cloud Manager) responses, such as confirming
that the XML config file was received and the commit status, queries for data, and
complete and read operations from Strata Cloud Manager are also compressed and reduced
by at least 15%. This helps reduce the time it takes to push configuration changes
from Strata Cloud Manager and query for information from your NGFW (Managed by Strata Cloud Manager). The compression has no impact on management or data processing
functionality.
Strata Cloud Manager Connectivity Using Port 443
May 2024
|
Palo Alto Networks NGFW (Managed by Strata Cloud Manager) use the dedicated non-standard port 3978 to
communicate with Strata Cloud Manager by default. In PAN-OS 11.2, you can instead
configure NGFW (Managed by Strata Cloud Manager)
onboarding to Strata Cloud Manager to use
destination port 443 instead of port 3978. Ports 3978 and 443 offer the same
functionality for NGFW (Managed by Strata Cloud Manager) and Strata Cloud Manager communication.
However, port 443 offers some distinct advantages when managing your network
configurations, reducing your network attack surface, and implementing Security
policy rules and audits:
- Ease of Configuration and Use—Port 443 is the standard port used for HTTP traffic encrypted with SSL. Using port 443 for NGFW (Managed by Strata Cloud Manager) and Strata Cloud Manager communication greatly simplifies network configuration management for both administrators and end users.Additionally, many corporate networks restrict incoming and outgoing traffic to a limited set of ports to minimize the network attack surface area. Port 443 is already commonly allowed on most enterprise networks without the need for additional network configurations. Using port 443 for NGFW (Managed by Strata Cloud Manager) and Strata Cloud Manager communication also improves your security posture by reducing the number of ports allowed on your network.
- Improved Compatibility—Port 443 is universally accepted and is the expected port for secure communications. Security tools that use port 443 are normally compatible with existing security configurations. This greatly reduces the need for custom firewall configurations and rules.
View Preferred and Base Releases of PAN-OS Software
May 2024
|
The Panorama web interface now displays the preferred releases and the
corresponding base releases of PAN-OS software. Before you upgrade or downgrade
Panorama or PAN-OS, you can view the list of preferred and base releases and choose
your preferred target PAN-OS release. Preferred releases offer the latest and the
most advanced features and ensure stability and performance. When there are no
preferred releases available, the corresponding base version is not displayed. If
necessary, you can choose to view either preferred releases or base releases.