: Install Panorama on Hyper-V
Focus
Focus

Install Panorama on Hyper-V

Table of Contents

Install Panorama on Hyper-V

How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector on Hyper-V.
You can now deploy Panorama™ and a Dedicated Log Collector on Hyper-V. Panorama deployed on Hyper-V is Bring Your Own License (BYOL), supports all deployment modes (Panorama, Log Collector, and Management Only), and shares the same processes and functionality as the M-Series hardware appliances. For more information on Panorama modes, see Panorama Models. Panorama virtual appliance and virtual Dedicated Log Collector on Hyper-V is available only on PAN-OS 8.1.3 and later releases.
  1. Download the Panorama91.1 base image VHDX file.
    1. Select
      Updates
      Software Updates
      and filter by
      Panorama Base Images
      to download the VHDX file (
      Panorama-HPV-9.1.0.vhdx
      ).
  2. Set up any vSwitch(es) that you will need. For more information, review the Virtual Switch Types for more information.
    1. From Hyper-V Manager, select the host and select
      Action
      Virtual Switch Manager
      to open the Virtual Switch Manager window.
    2. Under
      Create virtual switch
      , select the type of vSwitch to create and click
      Create Virtual Switch
      .
  3. Install the Panorama virtual appliance.
    1. On the Hyper-V Manager, select the host and select
      Action
      New
      Virtual Machine.
      Configure the following settings in the New Virtual Machine Wizard:
      1. Choose a
        Name
        and
        Location
        for the Panorama virtual appliance. The Panorama virtual appliance stores the VHDX file at the specified location.
      2. Choose
        Generation 1
        . This is the default option and the only version supported.
      3. For
        Startup Memory
        , assign the memory based on the intended system mode. See the Setup Prerequisites for the Panorama Virtual Appliance for the memory requirements for each mode.
        Do not enable dynamic memory; the Panorama virtual appliance requires static memory allocation.
      4. Configure
        Networking
        . Select an external vSwitch to connect the management interface on the firewall.
      5. To connect the
        Virtual Hard Disk
        , select
        Use an existing virtual hard disk
        and browse to the VHDX file you downloaded earlier.
      6. Review the summary and click
        Finish
        .
  4. Allocate the Panorama virtual appliance CPU cores.
    Review the Setup Prerequisites for the Panorama Virtual Appliance for minimum resource requirements.
    If you plan to use the Panorama virtual appliance as a Dedicated Log Collector, ensure that you configure the appliance with the required resources during initial deployment. The Panorama virtual appliance does not remain in Log Collector mode if you resize the virtual machine after you deploy it, and this results in a loss of log data.
    1. In the
      Hardware
      list, select
      Processor
      .
    2. Edit the currently allocated
      Number of virtual processors
      .
  5. Connect at least one network adapter for the dataplane interface on the firewall. Repeat this to create additional network interfaces on the Panorama virtual appliance.
    1. Select
      Settings
      Hardware
      Add Hardware
      and select the
      Hardware type
      for your network adapter.
      Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
    2. Click
      OK
      .
  6. (
    Optional
    ) Add additional storage for log collection. Repeat this step as needed to add additional virtual logging disks. If you want to deploy the Panorama virtual appliance in Management Only mode, continue to Step 6.
    If you intend to use the Panorama virtual appliance in Panorama mode or as a Dedicated Log Collector, add the virtual logging disks during the initial deployment. By default, the Panorama virtual appliance is in Panorama mode for the initial deployment when you meet the Panorama mode resource requirements and have added at least one virtual logging disk. Otherwise, the Panorama virtual appliance defaults to Management Only mode. Change the Panorama virtual appliance to Management Only mode if you just want to manage devices and Dedicated Log Collectors, and to not collect logs locally.
    The Panorama virtual appliance on Hyper-V only supports 2TB logging disks, and in total supports up to 24TB of log storage. You are unable to add a logging disk smaller than 2TB, or a logging disk with a size not divisible by the 2TB logging disk requirement. The Panorama virtual appliance partitions logging disks larger than 2TB into 2TB partitions.
    1. On the Hyper-V Manager, select the host and select
      Action
      New
      Hard Disk.
    2. If you see the Before You Begin prompt, click
      Next
      to begin adding the virtual logging disk.
    3. For the Disk Format, select
      VHDX
      . Click
      Next
      . to continue
    4. For the Disk Type, select
      Fixed Size
      or
      Dynamically Expanding
      based on your needs. Click
      Next
      to continue.
    5. Specify the
      Name
      and
      Location
      for the virtual logging disk file. Click
      Next
      to continue.
    6. To configure the disk, select
      Create a new virtual hard disk
      and enter the disk size. Click
      Next
      to continue.
    7. Review the Summary and
      Finish
      adding the virtual hard logging disk.
  7. Power on the Panorama virtual appliance.
    1. Select the Panorama virtual appliance instance from the list of
      Virtual Machines
      .
    2. Select
      Action
      Start
      to power on the Panorama virtual appliance.
  8. Connect to the Panorama virtual appliance console from the Hyper-V Manager.
    1. In the
      Virtual Machines
      list, select the Panorama virtual appliance.
    2. Select
      Actions
      Connect
      and enter the username and password to log in (default is admin for both).
  9. Configure a new administrative password for the Panorama virtual appliance.
    You must configure a unique administrative password before you can access the web interface or CLI of the Panorama virtual appliance. The new password must be a minimum of eight characters and include a minimum of one lowercase character, one uppercase character, and one number or special character.
    When you first log in to the Panorama CLI, you are prompted to enter the
    Old Password
    and the
    New Password
    for the
    admin
    user before you can continue.
  10. Configure the IP address of the management interface.
    1. Enter the following commands, where
      <Panorama-IP>
      is the IP address you want to assign to the Panorama management interface,
      <netmask>
      is the subnet mask,
      <gateway-IP>
      is the IP address of the network gateway, and
      <DNS-IP>
      is the IP address of the DNS server:
      admin>
      configure
      admin#
      set deviceconfig system ip-address
      <Panorama-IP>
      netmask
      <netmask>
      default-gateway
      <gateway-IP>
      dns-setting servers primary
      <DNS-IP>
      admin#
      commit
      admin#
      exit
    2. Troubleshoot Connectivity to Network Resources to verify network access to external services required for firewall management, such as the default gateway, DNS server, and the Palo Alto Networks Update Server, as shown in the following example:
  11. Register the Panorama virtual appliance and activate the device management license and support licenses.
    1. When leveraging VM Flex licensing, this step is required to generate the Panorama virtual appliance serial number needed to register the Panorama virtual appliance with the Palo Alto Networks Customer Support Portal (CSP).
    2. You must register the Panorama virtual appliance using the serial number provided by Palo Alto Networks in the order fulfillment email.
      This step is not required when leveraging VM Flex licensing as the serial number is automatically registered with the CSP when generated.
  12. Complete configuring the Panorama virtual appliance for your deployment needs.

Recommended For You