System Requirements for SD-WAN
Table of Contents
2.2
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
System Requirements for SD-WAN
Software and resource requirement for Panorama™ plugin
for SD-WAN.
Review the minimum software versions, plugin versions, and resource
requirements for the Panorama™ plugin for SD-WAN.
The following table provides the plugin versions that are
compatible with each other. We suggest you to use the Prisma Access cloud configuration
plugin version with the corresponding compatible SD-WAN plugin version listed in the
table, as the compatible versions contains new feature, bug fixes, or enhancements.
Platform
|
PAN-OS
|
System Requirement
|
Prisma Access Cloud Configuration Plugin
|
SD-WAN Plugin
|
---|---|---|---|---|
Panorama
|
10.1.11
|
|
4.0.0 and 5.0.0
|
2.2.6
|
10.1.11
|
4.0.0
|
2.2.5
| ||
10.1.10
10.1.10 is the recommended 10.1.x
release. |
4.0.0
|
2.2.4
| ||
10.1.9 | 3.2.1-h5 | 2.2.4 | ||
10.1.8
|
3.2.1-h5
|
2.2.2
| ||
10.1.5-h1
|
2.1
|
2.2.1
| ||
10.1.0
|
2.1
|
2.2
| ||
Next-Gen Firewall
|
|
N/A
| ||
Prisma Access Compute Node
|
10.0.7*
|
* Prisma Access Compute Nodes (IPSec Termination Nodes) must run
PAN-OS 10.0.7 or a later 10.0 release. If necessary, work with your
sales team to request an upgrade before attempting to onboard a
branch office to the Prisma Access hub.
|
The following firewall models support SD-WAN software capabilities:
- PA-220 and PA-220R
- PA-400 Series
- PA-820 and PA-850
- PA-3200 Series
- PA-5200 Series
- PA-5400 Series
- PA-7000 Series
- VM-Series firewalls
For more information about specific hardware availability, refer to the compatibility matrix.