Which PAN-OS versions on Firewall are compatible with Panorama for Secure onboarding using Authentication key ?
12381
Created On 07/03/22 10:44 AM - Last Modified 09/21/22 03:13 AM
Question
Which PAN-OS versions on Firewall are compatible with Panorama for Secure onboarding using Authentication key ?
Environment
- Panorama managed Palo Alto Firewalls
- Supported PAN-OS
- Secure Onboarding with Auth key.
Answer
Below table is a simplified compatibility matrix for onboarding Firewalls to Panorama after introducing the device authentication key starting 10.1 release.
| Panorama Version | |||||
| 10.0.x | 10.1.0 | 10.1.1 | 10.1.2 | 10.1.3 or later | |
| Firewall Version | |||||
| Pre 10.0 | yes | yes | yes | yes | yes |
| 10.0.x | yes | yes | yes | yes | yes |
| 10.1.0 | no | yes | yes | yes | no |
| 10.1.1 | no | yes | yes | yes | no |
| 10.1.2 | no | yes | yes | yes | no |
| 10.1.3 or later | no | no | no | no | yes |
- yes > compatible, firewall can be onboarded to Panorama
- no > not compatible, firewall cannot be onboarded to Panorama
- Pre-10.1.0 version, Panorama authenticates firewall based on serial number for onboarding
- Starting from PAN-OS 10.1.0 version, Panorama requires Device serial number and an Auth Key for onboarding the firewalls