Palo Alto Networks® Compatibility Matrix paloaltonetworks.com/documentation Contact Information Corporate Headquarters: Palo Alto Networks 3000 Tannery Way Santa Clara, CA 95054 www.paloaltonetworks.com/company/contact-support About the Documentation • For the most recent version of this guide or for access to related documentation, visit the Technical Documentation portal www.paloaltonetworks.com/documentation. • To search for a specific topic, go to our search page www.paloaltonetworks.com/documentation/ document-search.html. • Have feedback or questions for us? Leave a comment on any page in the portal, or write to us at [email protected]. Copyright Palo Alto Networks, Inc. www.paloaltonetworks.com © 2016-2020 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at www.paloaltonetworks.com/company/ trademarks.html. All other marks mentioned herein may be trademarks of their respective companies. Last Revised March 3, 2020 2 PALO ALTO NETWORKS® COMPATIBILITY MATRIX | Table of Contents Supported OS Releases by Model.................................................................. 7 Palo Alto Networks Next-Gen Firewalls............................................................................................... 9 Palo Alto Networks Appliances.............................................................................................................11 HA Port and Processor Support........................................................................................................... 12 VM-Series Firewalls..........................................................................................15 VM-Series Firewall Hypervisor Support..............................................................................................17 Partner Interoperability for VM-Series Firewalls.............................................................................. 25 Ciena................................................................................................................................................25 Cisco Cloud Services Platform..................................................................................................25 Cisco Enterprise Computer System (ENCS)...........................................................................26 Citrix SD-WAN............................................................................................................................. 27 Juniper NFX Network Services Platform............................................................................... 28 NSX SD-WAN by VeloCloud.................................................................................................... 28 Nuage Networks...........................................................................................................................29 Nutanix............................................................................................................................................29 Versa Networks............................................................................................................................ 30 Vyatta.............................................................................................................................................. 30 VM-Series Plugin.......................................................................................................................................31 AWS and AWS Gov Cloud Regions.....................................................................................................33 Azure Regions............................................................................................................................................ 35 Google Cloud Regions............................................................................................................................. 36 Alibaba Cloud Regions.............................................................................................................................37 VM-Series Firewall Amazon Machine Images (AMI) List................................................................ 38 Images for PAN-OS 9.0..............................................................................................................38 Images for PAN-OS 8.1..............................................................................................................39 Images for PAN-OS 8.0..............................................................................................................40 Images for PAN-OS 7.1.11........................................................................................................ 43 PAN-OS Images for AWS GovCloud.......................................................................................44 Panorama............................................................................................................ 45 Panorama Plugins......................................................................................................................................47 VMware NSX.................................................................................................................................47 Cloud Services...............................................................................................................................48 Interconnect...................................................................................................................................48 Public Cloud-AWS, Azure, GCP................................................................................................49 Cisco ACI........................................................................................................................................ 50 VMware vCenter.......................................................................................................................... 51 Cisco TrustSec...............................................................................................................................51 Nutanix............................................................................................................................................51 SD-WAN.........................................................................................................................................52 Panorama Hypervisor Support.............................................................................................................. 53 MFA Vendor Support...................................................................................... 55 MFA Vendor Support.............................................................................................................................. 57 TABLE OF CONTENTS iii Supported Cipher Suites................................................................................. 59 Cipher Suites Supported in PAN-OS 9.1............................................................................................ 61 PAN-OS 9.1 GlobalProtect Cipher Suites..............................................................................61 PAN-OS 9.1 IPSec Cipher Suites............................................................................................. 62 PAN-OS 9.1 IKE and Web Certificate Cipher Suites.......................................................... 63 PAN-OS 9.1 Decryption Cipher Suites...................................................................................64 PAN-OS 9.1 Administrative Session Cipher Suites..............................................................66 PAN-OS 9.1 HA1 SSH Cipher Suites......................................................................................67 PAN-OS 9.1 PAN-OS-to-Panorama Connection Cipher Suites........................................68 PAN-OS 9.1 Cipher Suites Supported in FIPS-CC Mode...................................................68 Cipher Suites Supported in PAN-OS 9.0............................................................................................ 72 PAN-OS 9.0 GlobalProtect Cipher Suites..............................................................................72 PAN-OS 9.0 IPSec Cipher Suites............................................................................................. 73 PAN-OS 9.0 IKE and Web Certificate Cipher Suites.......................................................... 74 PAN-OS 9.0 Decryption Cipher Suites...................................................................................75 PAN-OS 9.0 Administrative Session Cipher Suites..............................................................77 PAN-OS 9.0 HA1 SSH Cipher Suites......................................................................................78 PAN-OS 9.0 PAN-OS-to-Panorama Connection Cipher Suites........................................79 PAN-OS 9.0 Cipher Suites Supported in FIPS-CC Mode...................................................79 Cipher Suites Supported in PAN-OS 8.1............................................................................................ 83 PAN-OS 8.1 GlobalProtect Cipher Suites..............................................................................83 PAN-OS 8.1 IPSec Cipher Suites............................................................................................. 84 PAN-OS 8.1 IKE and Web Certificate Cipher Suites.......................................................... 85 PAN-OS 8.1 Decryption Cipher Suites...................................................................................86