10-23-2026 12:55 PM
Hello All!
Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS version requirement (ex: minimum is 10.2.1, so is the latest linked to the 10.2.x code branch only), or is it a general reference to the latest (most recent) PAN-OS code branch available (such as 12.2.x)?
Cheers,
nohash4u
11-03-2026 01:36 AM
Hi @nohash4u ,
In the Palo Alto Networks Panorama Plugins Compatibility Matrix, when the Maximum PAN-OS Version is listed as Latest without qualification, it refers to general compatibility with subsequent and newer PAN-OS releases, rather than being restricted solely to the minimum version's maintenance branch.
When a plugin version is constrained to a specific major or minor release branch, the compatibility matrix explicitly qualifies the maximum version (for example, stating Latest 10.2 Release or Latest 11 release).
In contrast to entries where a plugin's lifecycle is bounded to a specific train (such as Enterprise DLP 3.0.10 capped at "Latest 10.2 Release"), an unqualified "Latest" designation indicates forward compatibility across releases unless a target PAN-OS version explicitly mandates a higher plugin baseline.
Hope this clarifies,
11-03-2026 01:36 AM
Hi @nohash4u ,
In the Palo Alto Networks Panorama Plugins Compatibility Matrix, when the Maximum PAN-OS Version is listed as Latest without qualification, it refers to general compatibility with subsequent and newer PAN-OS releases, rather than being restricted solely to the minimum version's maintenance branch.
When a plugin version is constrained to a specific major or minor release branch, the compatibility matrix explicitly qualifies the maximum version (for example, stating Latest 10.2 Release or Latest 11 release).
In contrast to entries where a plugin's lifecycle is bounded to a specific train (such as Enterprise DLP 3.0.10 capped at "Latest 10.2 Release"), an unqualified "Latest" designation indicates forward compatibility across releases unless a target PAN-OS version explicitly mandates a higher plugin baseline.
Hope this clarifies,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
