Compatibility Matrix
Palo Alto Networks Certified Integrations
Table of Contents
Palo Alto Networks Certified Integrations
Review the Palo Alto Networks certified partner interoperability
index for VM-Series firewalls.
Review these lists to see the Palo Alto Networks certified partner products with which VM-Series
firewalls can interoperate. The tables include details about hardware platforms and
software versions on which you can deploy a VM-Series firewall.
The partner software version and the PAN-OS® version columns display the range of versions and
the minimum version in parentheses. For example, if the PAN-OS Version column
displays PAN-OS 10.1.x (10.1.4), then integration support begins
with PAN-OS 10.1 but not until PAN-OS 10.1.4. and later PAN-OS versions.
- Ciena
- Cisco Cloud Services Platform
- Cisco Enterprise Computer System (ENCS)
- Citrix SD-WAN
- Juniper NFX Network Services Platform
- NSX SD-WAN by VeloCloud
- Nuage Networks
- Versa Networks
- Vyatta
Ciena
The following table shows the Ciena products with which
VM-Series firewalls interoperate.
Hardware | Hypervisor | SAOS Supported Software Version (Minimum) | SAOS Tested Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
3906mvi and 3926mvi | KVM | 18.x.x (18.06.00) | 18.06.x (18.06.00) | 9.1.x (9.1.0) | Layer 3 mode on the VM-50, VM-100, and VM-300 VirtIO and
DPDK mode. | Ciena documentation |
Cisco Cloud Services Platform
The following table shows the Cisco Cloud Services Platform
(CSP) products with which VM-Series firewalls interoperate.
Hardware | Hypervisor | CSP Supported Software Version (Minimum) | CSP Tested Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
CSP 5228
|
Megaport (KVM)
|
2.6.x (2.6.1)
|
2.6.x (2.6.1)
|
10.2.x (10.2.0)
|
Layer 3
VM-Series Firewalls in an HA configuration
SR-IOV, Packet MMAP, and DPDK mode
| |
CSP 5200 Series
|
KVM
|
2.6.x (2.6.1)
|
2.6.x (2.6.1)
|
10.2.x (10.2.0)
|
Layer 2, Layer3, Virtual wire deployments on all VM-Series models
except VM-50
VM-Series Firewalls in an HA configuration
SR-IOV, Packet MMAP, and DPDK mode
| |
CSP 5400 Series
|
4.6.x (4.6)
|
4.6.x (4.6.1-FC1)
|
10.1.x (10.1.0)
| |||
CSP 5400 Series CSP 2100 Series | 2.x.x (2.4.0) | 2.4.x (2.4.0) | 9.1.x (9.1.0) |
Cisco Enterprise Computer System (ENCS)
The following table shows the Cisco Enterprise Computer
System (ENCS) products with which VM-Series firewalls interoperate.
Hardware | Hypervisor | NFVIS Supported Software Version (Minimum) | Tested NFVIS Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
Cisco 5400 Series
|
KVM
|
4.12.x (4.12)
|
4.12.x (4.12)
|
11.1.x (11.1.0)
|
| VM-Series on Cisco ENCS |
4.12.x (4.12)
|
4.12.x (4.12)
|
10.2.x (10.2.0)
| ||||
4.6.x (4.6)
|
4.6.x (4.6.1-FC1)
|
10.1.x (10.1.0)
| ||||
3.x.x (3.8)
4.6.x (4.6.1-FC1)
|
3.10.x
(3.10.1)
3.12.x
(3.12.1)
4.6.x (4.6.1-FC1)
|
9.1.x (9.1.0)
|
For PAN-OS 11.1.x, you must use the NFVIS CLI to upload the PAN-OS image.
The PAN-OS file size exceeds the file size limit of the ENCS UI.
Citrix SD-WAN
The following table shows the Citrix SD-WAN products
with which VM-Series firewalls interoperate.
Hardware | Hypervisor | Supported Software Version (Minimum) | Tested Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
Citrix SD-WAN 1100 Appliance | KVM | 11.x.x (11.0.1) | 11.0.x (11.0.1) | 9.1.x (9.1.0) | Virtual wire deployments VirtIO with packet
MMAP mode support only; so you must disable DPDK with op-cmd-dpdk-pkt-io=off in the init-cfg.txt file
used for bootstrapping or use the CLI command set system setting dpdk-pkt-io off | |
9.1.x (9.1.0) | Virtual wire DPDK Mode |
Juniper NFX Network Services Platform
The following table shows the Juniper NFX Network Services
Platform products with which VM-Series firewalls interoperate.
Hardware | Hypervisor | Junos Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|
NFX 250 | KVM | 15.1X53-D470.x (15.1X53-D470.5) | 9.1.x (9.1.0) | Layer 2, Layer 3, Virtual Wire DPDK mode |
NSX SD-WAN by VeloCloud
The following table shows the NSX SD-WAN by VeloCloud
products with which VM-Series firewalls interoperate.
Hardware | Hypervisor | VCE Supported Software Version (Minimum) | Tested VCE Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
Edge 520v Edge 840 | KVM | 3.x.x (3.2.0) | 3.3.x (3.3.1) | 9.1.x (9.1.0) | Virtual wire deployments DPDK |
Nuage Networks
The following table shows the Nuage Networks products
with which VM-Series firewalls interoperate.
Hardware | Hypervisor | VSP Supported Software Version (Minimum) | Tested VSP Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
Nuage NSG-X series | — | 5.x.x (5.3.3U3) | 5.3.x (5.3.3U3) | TBD | Virtual wire deployments on VM-50 and VM-100
models VirtIO with packet MMAP mode support only DPDK must
be disabled: If you bootstrap, include op-cmd-dpdk-pkt-io=off in the init-cfg.txt file, or,
on the VM Series firewall, use the CLI command set system setting dpdk-pkt-io off | Nuage Networks documentation |
Versa Networks
The following table shows the Versa Networks products
with which VM-Series firewalls interoperate.
Hardware | Hypervisor | Supported Versa FlexVNF Software Version (Minimum) | Tested Versa FlexVNF Software Version (Minimum) | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|---|
Versa 930 (Dell VEP4600) | KVM | 21.x.x (21.1.2) | 21.1.x (21.1.2) | 9.1.x (9.1.0) | Virtual wire, L3 deployments with DPDK | Versa Documentation |
Vyatta
The following table shows the Vyatta products with which
VM-Series firewalls interoperate.
Platform | Hypervisor | Vyatta Software Version | PAN-OS Version (Minimum) | Deployment Modes Supported | Documentation |
---|---|---|---|---|---|
AT&T vRouter 5600 | KVM | 19.x (1903f) | 9.1.x (9.1.0) | Virtual wire, L2, L3 deployments with DPDK VM-50,
VM-100, and VM-300 | — |