System Requirements for SD-WAN
Table of Contents
3.0
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure Multiple Virtual Routers on SD-WAN Hub
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
System Requirements for SD-WAN
Software and resource requirement for Panorama™ plugin
for SD-WAN.
Review the minimum software versions, plugin versions, and resource
requirements for the Panorama™ plugin for SD-WAN.
The SD-WAN plugin is not compatible with the Advanced Routing Engine in the current
PAN-OS 10.2 release. Do not enable Advanced Routing if you are using the SD-WAN
plugin.
The following table provides the plugin versions that are
compatible with each other. We suggest you to use the Prisma Access cloud configuration
plugin version with the corresponding compatible SD-WAN plugin version listed in the
table, as the compatible versions contains new feature, bug fixes, or enhancements.
|
Platform
|
PAN-OS
|
System Requirement
|
Prisma Access Cloud Configuration Plugin
|
SD-WAN Plugin
|
|---|---|---|---|---|
|
Panorama
| 10.2.11 |
| 5.1.0-h21 | 3.0.8 |
| 10.2.8 | 4.0.0-h80, 4.1.0-h49, and 5.0.0-h9 | 3.0.7 | ||
|
10.2.7
|
4.0.0 and 5.0.0
|
3.0.6
| ||
|
10.2.6
|
4.0.0
|
3.0.6
| ||
|
10.2.5
|
4.0.0
|
3.0.5
| ||
|
10.2.3
|
3.2.1-h5
|
3.0.4
| ||
|
10.2.1
|
3.2.1-h21
|
3.0.1
| ||
|
10.2.0
|
3.2.1-h21
|
3.0.0
| ||
| 10.1.13-h1 | 5.1.0 | 2.2.7 | ||
|
10.1.11
|
4.0.0 and 5.0.0
|
2.2.6
| ||
|
10.1.11
|
4.0.0
|
2.2.5
| ||
|
10.1.10
10.1.10 is the recommended 10.1.x
release. |
4.0.0
|
2.2.4
| ||
|
10.1.9
|
3.2.1-h5
|
2.2.4
| ||
|
10.1.8
|
3.2.1-h5
|
2.2.2
| ||
|
10.1.5-h1
|
2.1
|
2.2.1
| ||
|
10.1.0
|
2.1
|
2.2
| ||
|
Next-Gen Firewall
|
|
N/A
| ||
|
Prisma Access Compute Node
|
10.0.7*
|
* Prisma Access Compute Nodes (IPSec Termination Nodes) must run
PAN-OS 10.0.7 or a later 10.0 release. If necessary, work with your
sales team to request an upgrade before attempting to onboard a
branch office to the Prisma Access hub.
| ||
The following firewall models support SD-WAN software capabilities:
- PA-220 and PA-220R
- PA-400 Series
- PA-820 and PA-850
- PA-3200 Series
- PA-3400 Series
- PA-5200 Series
- PA-5400 Series
- PA-7000 Series
- VM-Series firewalls on public clouds (AWS, Azure, GCP, OCI, Nutanix, IBM) and private clouds (VMware ESXi, KVM hypervisor, and Nutanix)
For more information about specific hardware availability, refer to the compatibility matrix.