Focus

VM-Series and Panorama Plugins Release Notes

Panorama CloudConnector Plugin 3.0.0

Table of Contents

Panorama CloudConnector Plugin 3.0.0

What's new for Panorama CloudConnector Plugin 3.0.0 (For AIOps and Cloud NGFW for AWS)

Panorama CloudConnector plugin 3.0.0 supports the following enhancements:

Support for Panorama configuration operations: You can synchronize configuration changes between Strata Cloud Manager and on-premises Panorama devices using an asynchronous communication framework. When you enable this plugin, you gain the ability to seamlessly propagate configuration changes from Strata Cloud Manager to your Panorama management platform without requiring direct cloud-to-on-premises network connectivity. This synchronization is supported for Policy Optimizer and Config Cleanup features in Strata Cloud Manager.
Strata Cloud Manager provides you with comprehensive audit trails and status tracking for every configuration operation, ensuring you maintain full visibility into what changes were requested, when they were applied, and whether they succeeded or failed. This plugin supports multiple operation types including create, update, delete, and multi-configure operations, giving you flexibility in how you structure and deploy your configuration changes while maintaining the compliance of your Panorama configuration management workflows. All commit changes pushed to your Panorama are managed under the administrator name __cloudconnector.
Use the below command to enable or disable the synchronization after you enable the CloudConnector plugin:
```
> request plugins cloudconnector sync
  disable   Disable cloud connector sync functionality
  enable    Enable cloud connector sync functionality
 
> request plugins cloudconnector sync enable
```
Support for High Availability (HA) configurations: When you deploy firewalls or Panoramas in HA configurations, Strata Cloud Manager simplifies management by treating paired firewalls or Panoramas as a single logical unit. This unification streamlines operations like policy analysis and configuration cleanup by preventing duplicate results and allowing you to manage the HA pair through one consolidated entity instead of separate device entries.
This feature ensures consistency during failover scenarios regardless of which device is currently active, policy analysis results and configuration cleanup operations remain accessible. Strata Cloud Manager processes each HA pair once, avoiding duplicated efforts across both members for policy optimization, configuration cleanup, or analysis operations, while still providing complete visibility into the health and status of both devices.

The following Panorama versions are supported:

Panorama Versions 10.2.x (10.2.3 and later) and 11.0.0
You can download this version of the CloudConnector Plugin on Panorama versions 10.2.3 or later from the Customer Support Portal or directly from PanoramaPlugins.
Panorama Versions 11.0.1 and above
To help customers, we have preinstalled this plugin with the newer Panorama versions.

After installing the CloudConnector Plugin, you need to enable this plugin using the command:

> request plugins cloudconnector enable basic

To help customers, we have preinstalled this plugin with newer Panorama versions (11.0.1 and above).
If you have already installed both the AIOps plugin and the CloudConnector plugin, uninstall the AIOps plugin, as they are identical and only the name has changed. Ensure that you have only one plugin installed, which should be the latest version of the CloudConnector plugin.

If you installed the AIOps plugin on PAN-OS 10.2.3 and then upgraded to PAN-OS 11.0.1 or later, a default version of the plugin will be installed with the new PAN-OS version. This results in both plugins being present on Panorama. In this case, follow these steps:

In the Panorama web interface, select Panorama > Plugins and Uninstall the AIOps plugin.
Enable the CloudConnector plugin:
> request plugins cloudconnector enable basic

If you upgrade to PAN-OS 11.0.* or 11.1.* without the CloudConnector plugin installed, you may receive an incorrect plugin version by default. To resolve this, you must uninstall the incorrect version and install the latest CloudConnector plugin.

Panorama CloudConnector Plugin

Panorama CloudConnector Plugin 2.1.0