Coming Soon: Prisma Access 1.7

[kiwi]

Get Ready... Prisma Access 1.7 is on its way!

Prisma Access 1.7 offers you some new and exciting features that will be released with the Cloud Services Plugin version 1.7.

The Prisma Access 1.7 plugin is tentatively scheduled to be released near September 8th, so we want to make sure that you have the proper time to plan and schedule this required plugin upgrade on your Panorama. Be sure to review the upcoming planned timelines, keynotes, and best practices references below.

Prisma Access customers can also get a sneak peak at what's to come by going to the Customer Resources area on LIVEcommunity.

Please see the following timeline to plan your upgrade:

August 14	Prisma Access will perform infrastructure/maintenance upgrades. Your deployment should not experience any traffic impact. However, avoid committing any new changes during this time.
August 28, 2020 – August 31, 2020	Prisma Access performs a dataplane upgrade for your deployment, so you can take advantage of the new features being released. Please make sure all changes that need to be pushed to the Prisma Access environment are pushed before the weekend and freeze configuration changes/commits during this weekend.
September 8, 2020 – October 15, 2020	You must upgrade to the Cloud Services Plugin 1.7, which requires Panorama version 9.0.4 or later. The phased rollout for the Cloud Services plugin 1.7 is planned starting September 8, 2020. When the new plugin is available for you, you will receive a notification on the Customer Support Portal and an alert will be generated on Prisma Access Insights. After you receive the notification to install the plugin, you have until October 1, 2020 to complete the installation. Update - The enforcement date for upgrading the 1.7 plugin has been moved to October 15th, 2020. Prisma Access customers must upgrade the current plugin to the latest 1.7 plugin by this date.

Note about Panorama and PAN-OS

• If your organization plans to use PAN-OS 9.1 features with Prisma Access, you should plan to upgrade your Panorama system to version 9.1.x.
• If you do not plan to use any PAN-OS 9.1 features or cannot upgrade the Panorama to 9.1, you will be able to continue using Panorama 9.0.x with the Cloud Services Plugin version 1.7 until February 1, 2021.

For more details about Panorama, be sure to sign in with your customer account and read, "Prisma Access: Plan for Panorama EoS Dates for Panorama Software Versions" in our Customer Resources area.

Best Practice:

After the service upgrades, the egress IP addresses may change from the currently used IPs to the reserved IP addresses. We recommend that the customers add all Active (in-use) and reserved public IPs to the allow list with SaaS/third-party vendors, so these IPs can be obtained by using the API.

For the Technical Documentation, please review, "Retrieve the IP Addresses for Prisma Access" in our TechDocs website. It is recommended to have the allow-list process automated. Verify you have the all Active and Reserved IPs on your allow list by August 28th, 2020 and perform the verification of IPs on your allow list even after the upgrade on August 30th, 2020.

We would like to make you aware of some changes that will occur after upgrading to 1.7, specifically to the GP logs:

• After the Prisma Access 1.7 upgrade, non-traffic and non-HIP GlobalProtect related logs will have a new category and will be displayed under a new label. See here (PDF version)
• Panorama 9.1 customers will be able to see all GlobalProtect logs from Panorama
• Panorama 9.0 customers will still see traffic and HIP logs via Panorama but will need to use the Explore app from the Hub to see remaining logs.

The recommendation is to upgrade to 9.1.  as 9.0 EOL on 11/20

To receive notifications on service upgrade and availability, please subscribe here.

NOTICE:   On February 1, 2021, Panorama version 9.0 is End-of-Support for compatibility with Prisma Access.
Before this date, you must upgrade your Panorama version to 9.1.2 or later.

Thanks for taking time to read this blog.

Don't forget to hit that Like (thumbs up) button and don't forget to subscribe to the LIVEcommunity Blog.

Stay Secure,
Kiwi out!