Features Introduced in Prisma Access 2.1 Innovation
Focus
Focus

Features Introduced in Prisma Access 2.1 Innovation

Table of Contents

Features Introduced in Prisma Access 2.1 Innovation

This section lists the new features that are available in Prisma Access (Panorama Managed) 2.1, along with upgrade information and considerations if you are upgrading from a previous Prisma Access version.

Cloud Services Plugin 2.1 Preferred and Innovation

There are two Prisma Access 2.1 plugin versions:
  • Cloud Services Plugin 2.1 Preferred runs on the PAN-OS version 9.1.7 dataplane, which is the recommended version for Prisma Access 2.0 and 2.1. This is the same dataplane as that running in 2.0 Preferred.
  • Cloud Services Plugin 2.1 Innovation runs on the PAN-OS 10.0.5 dataplane and unlocks the latest features available with the PAN-OS 10.0.5 dataplane, including all the features in the Cloud Services Plugin 2.1 Innovation version.

Upgrade Considerations for Prisma Access 2.1 Innovation

If you are upgrading from 2.0 Innovation to 2.1 Innovation, Palo Alto Networks will need to upgrade your dataplane from 10.0.3 to 10.0.5. Be sure that you have signed up for alerts in the Prisma Access app. Palo Alto Networks will notify you 21 days in advance for the available dates and time windows for the dataplane upgrade. After Palo Alto Networks upgrades your dataplane, you can continue to use the 2.0 Innovation version of the Cloud Services plugin until you download and install the 2.1 Innovation version of the Cloud Services plugin.
If your deployment is on 2.0 Preferred and you would like to upgrade to 2.1 Innovation, reach out to your Palo Alto Networks Account representative and submit a request. The request will be reviewed internally and, if approved, your deployment will be upgraded to 2.1-Innovation.

New Features—Cloud Services Plugin 2.1 Innovation

The following table describes the new features introduced in Prisma Access version 2.1 Innovation.
Prisma Access supports GlobalProtect versions 5.1 and 5.2. For a list of the Panorama software versions that are supported with Prisma Access, see Minimum Required Panorama Software Versions in the Palo Alto Networks Compatibility Matrix.
The Cloud Services Plugin 2.1 Innovation version includes the following new features.
Feature
Description
Licensing Updates
If you have activated a new Prisma Access deployment with a global worldwide presence, you can make use of the new Global Evaluation option to evaluate Prisma Access at global scale.
Prisma SD-WAN CloudBlade Thin Client Integration with Cloud Services Plugin
For Prisma SD-WAN integrations with Prisma Access, the Cloud Services plugin includes a built-in CloudBlade Version 3.0 thin client that eliminates the requirement to have a Docker container host or Kubernetes environment to host a separate CloudBlade. This integration enables easier onboarding of Prisma SD-WAN devices using remote network connections. This integration will be included in Prisma Access 2.1 at a later date.
Support for Asymmetric Routing Across Multiple Service Connections
Using Backbone Routing options, you can specify Prisma Access to allow asymmetric flows through the Prisma Access backbone. The ability to allow asymmetric flows across multiple service connections is useful in cases where you want to use ECMP or another load balancing mechanism for service connections from your CPE.
Trusted (TLS) API Endpoints
Prisma Access API endpoints use a new SSL/TLS server certificate from a trusted third-party certificate authority (CA), which enables you to retrieve the Prisma Access public and infrastructure addresses from an API URL that uses SSL/TLS and a trusted certificate. The new API endpoint is api.prod.datapath.prismaaccess.com.
If you are using the current API to retrieve Prisma Access public and infrastructure IP addresses, that functionality is not affected.
WildFire Australia Cloud Support
To allow you to adhere to data sovereignty and residency laws as well as established data protection and privacy regulations, Prisma Access supports the use of the WildFire Australia Cloud (au.wildfire.paloaltonetworks.com). The following locations map to the WildFire Australia Cloud:
  • Australia East
  • Australia Southeast
  • Australia South
  • New Zealand
  • Papua New Guinea