Device Certificate for a Palo Alto Networks Cloud Service
Focus
Focus
Compatibility Matrix

Device Certificate for a Palo Alto Networks Cloud Service

Table of Contents

Device Certificate for a Palo Alto Networks Cloud Service

Review which Palo Alto Networks cloud service requires a device certificate.
A Palo Alto Networks cloud service is a cloud-hosted service maintained and operated by Palo Alto Networks.
You must install the appropriate device certificate on the firewalls, Panorama™ appliances, and WildFire® appliances that are using the cloud service that is running one of the following PAN-OS® versions:
  • PAN-OS 11.2.0 or a later PAN-OS 11.2 version
  • PAN-OS 11.1.0 or a later PAN-OS 11.1 version
  • PAN-OS 11.0.2 or a later PAN-OS 11.0 version
  • PAN-OS 10.2.5 or a later PAN-OS 10.2 version
  • PAN-OS 10.1.10 or alater PAN-OS 10.1 version
  • PAN-OS 9.1.8 or a later PAN-OS 9.1 version
Review the Palo Alto Networks cloud services listed below that require you to install a device certificate before it will function as expected. Panorama management of firewalls, Dedicated Log Collectors, and WildFire appliances or downloading content and software updates from the Palo Alto Networks update server does not require a device certificate. You also do not need to install a device certificate to establish communication between a firewall and a WildFire appliance.
Cloud Service
Firewall
(Individual and Panorama-Managed)
Panorama
AIOps
Yes
Yes
App-ID Cloud Engine (ACE)
Yes
Yes
Cloud Services (Prisma® Access)
N/A
No
Strata™ Logging Service
(Formerly Cortex® Data Lake)
Yes
(PAN-OS 10.1 and later)
Yes
(PAN-OS 10.1 and later)
Device Telemetry
Yes
Yes
Enterprise DLP
Yes
Yes
Inline Categorization
Also requires an Advanced URL Filtering license
Yes
No
Inline Cloud Analysis
Also requires an Advanced Threat Protection license
Yes
No
Internet of Things (IoT) Security
Yes
Yes
ZTP
No
Yes