>
    Strata Copilot
    Software and Feature Prerequisites
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Release Information
    4. Software and Feature Prerequisites
    Download PDF
    Prisma Access

    Software and Feature Prerequisites

    Table of Contents

    Software and Feature Prerequisites

    Learn about the software and feature dependencies for Prisma Access 6.1.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    This section provides you with the recommended software versions for Prisma Access 6.1, along with the minimum dataplane requirements for the new features.

    Recommended Software Versions for Prisma Access 6.1.1 Preferred and Innovation

    There are two Prisma Access 6.1.1 versions:
    • 6.1.1 Preferred runs a PAN-OS 11.2.7-h10 dataplane.
    • 6.1.1 Innovation runs on a PAN-OS 12.1.5 dataplane.
    For Prisma Access 6.1.1 features, Palo Alto Networks recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
    Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 6.1.1Recommended GlobalProtect VersionRecommended Panorama Version
    6.16.1 6.1.1 Preferred: Dependent on feature (PAN-OS 11.2.7-h10 is the baseline version for 6.1.1 Preferred)
    6.1.1 Innovation: PAN-OS 12.1.5
    6.1.7+
    6.1.3+
    6.2.1+
    Minimum required versions for IPv6 Support for Public Apps for IP Optimization:
    • 6.2.6 client version for Windows and macOS
    • 6.2.7 for Linux
    • 6.1.7 for Android and IOS
    12.1.5
    12.1.2
    11.2.0
    11.1.0
    11.0.1+
    10.2.10+

    Recommended Software Versions for Prisma Access 6.1 Preferred and Innovation

    There are two Prisma Access 6.1 versions:
    • 6.1 Preferred runs a PAN-OS 11.2.7-h5 dataplane.
    • 6.1 Innovation runs on a PAN-OS 12.1.1 dataplane.
    For Prisma Access 6.1 features, Palo Alto Networks recommends that you upgrade your Prisma Access to the following versions before installing the plugin.
    Prisma Access VersionCloud Services Plugin VersionRequired Dataplane Version for 6.1Recommended GlobalProtect VersionRecommended Panorama Version
    6.16.1 6.1 Preferred: Dependent on feature (PAN-OS 11.2.7-h5 is the baseline version for 6.1 Preferred)
    6.1 Innovation: PAN-OS 12.1.1
    6.1.7+
    6.1.3+
    6.2.1+
    Minimum required versions for IPv6 Support for Public Apps for IP Optimization:
    • 6.2.6 client version for Windows and macOS
    • 6.2.7 for Linux
    • 6.1.7 for Android and IOS
    12.1.2
    11.2.0
    11.1.0
    11.0.1+
    10.2.10+

    Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 6.1.1 Preferred and Innovation Features

    Prisma Access 6.1.1 features require one of more of the following components to function:
    • Infrastructure Upgrade—The infrastructure includes the underlying service backend, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
      Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
    • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)— Prisma Access (Managed by Panorama) release 6.1.1 requires a minimum Cloud Services plugin version of 6.1.0-h3.
    • Dataplane Upgrade—The dataplane enables traffic inspection and security policy enforcement on your network and user traffic.
      • For Prisma Access (Managed by Strata Cloud Manager), view your Prisma Access version and release type by going to ManageConfigurationNGFW and Prisma AccessOverviewPrisma Access Version.
      • For Prisma Access (Managed by Panorama) deployments, view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version.
    • A dataplane upgrade to 6.1.1 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
    These features are activated with the infrastructure upgrade only for Prisma Access 6.1.1:
    • None
    These features require an infrastructure and plugin upgrade but don't require a dataplane upgrade:
    • Brazil Southeast and UK West Locations and Compute Locations
    These features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 11.2.7-h10 (coming soon), making them Prisma Access 6.1.1 Preferred features:
    • None
    These features require an infrastructure, plugin, and dataplane upgrade to PAN-OS 12.1.5, making them Prisma Access 6.1.1 Innovation features:
    • MACsec Encryption for Dedicated Interconnects in Strata Cloud Manager
    • Post-Quantum Cryptography (PQC) Support for TLS Traffic

    Infrastructure, Plugin, and Dataplane Dependencies for Prisma Access 6.1 Preferred and Innovation Features

    Prisma Access 6.1 features require one of more of the following components to function:
    • Infrastructure Upgrade—The infrastructure includes the underlying service back-end, orchestration, and monitoring infrastructure. Prisma Access upgrades the infrastructure before the general availability (GA) date of a Prisma Access release.
      Features that require only an infrastructure upgrade to be unlocked take effect for all Prisma Access deployments, regardless of version, at the time of the infrastructure upgrade.
    • Plugin Upgrade (Prisma Access Panorama Managed Deployments Only)—Installing the plugin activates the features that are available with that release. You download and install the plugin on the Panorama that manages Prisma Access.
      Prisma Access (Managed by Panorama) release 6.1 uses the Cloud Services Plugin 6.1.
    • Dataplane Upgrade—The dataplane enables traffic inspection and security policy enforcement on your network and user traffic.
      • For Prisma Access (Managed by Strata Cloud Manager), view your Prisma Access version and release type by going to ManageConfigurationNGFW and Prisma AccessOverviewPrisma Access Version.'
      • For Prisma Access (Managed by Panorama) deployments, view your dataplane version by going to PanoramaCloud ServicesConfigurationService Setup and viewing the Prisma Access Version. Prisma Access 6.1 Preferred runs PAN-OS 11.2.7-h5 and Prisma Access 6.1 Innovation runs PAN-OS 12.1.1.
    A dataplane upgrade to 6.1 Innovation is optional, and is only required if you want to take advantage of the features that require a dataplane upgrade.
    These features are activated with the infrastructure upgrade only for Prisma Access 6.1:
    • None
    These features require an infrastructure upgrade, a minimum Cloud Services plugin version of 6.0, and a minimum dataplane of PAN-OS 11.2:
    • Additional Prisma Access Locations
    • Cloud-Delivered Security Services Support for Prisma Access
    These features require an infrastructure and plugin upgrade and require a minimum dataplane version of PAN-OS 11.2.7-h5, making them Prisma Access 6.1 Preferred features:
    • Response Page Customization and Context Passing
    • SaaS Policy Rule Recommendations for NGFW and Prisma Access
    • Server-Initiated Traffic Flow for Prisma Access ZTNA Connector
    These features require an infrastructure, plugin, and dataplane upgrade to PAN-OS 12.1.1, making them Prisma Access 6.1 Innovation features:
    • CloudHSM Support for Prisma Access
    • SASE Private Location

    © 2026 Palo Alto Networks, Inc. All rights reserved.