Benefits of Managing WildFire Clusters Using Panorama
| Where Can I Use
This? | What Do I Need? |
|---|
If you are using a Panorama HA pair to manage the cluster and
one Panorama fails, the other Panorama appliance takes over management
of the cluster. If a Panorama HA peer fails, restore service from
the failed Panorama peer as soon as possible to restore management
HA.
Providing analysis, storage, and centralized management HA requires
at least two WildFire appliances configured as cluster controller
and controller backup nodes, and two Panorama M-Series or virtual
appliances.
Firewalls receive a registration list that contains all of the
WildFire appliances that are members of the cluster. Firewalls can
register with any node in the cluster and the cluster automatically
balances the load among its nodes.
Additional benefits of Panorama-managed clusters include:
Automated software upgrades—Panorama can orchestrate
rolling software upgrades across all nodes in a cluster, eliminating
the error-prone manual upgrade process and reducing maintenance windows.
Cross-cluster signature synchronization—Locally generated
signatures can be shared across multiple clusters and standalone nodes
managed by the same Panorama instance, ensuring that threat intelligence
from one cluster is available to firewalls connected to other
clusters.
Centralized health monitoring—Panorama provides
aggregated health state visibility (Green, Yellow, Red) for all managed
clusters based on the status of core services including database,
messaging, management plane, and signature generation.
Cluster metadata management—Panorama serves as the
cluster registry, pushing cluster membership metadata to all nodes
to simplify lifecycle operations such as adding clusters, removing
clusters, and modifying node membership.
