Add Additional Disk Space to the VM-Series Firewall

Table of Contents

Perform Initial Configuration on the VM-Series on ESXi

Use VMware Tools on the VM-Series Firewall on ESXi and vCloud Air

Add Additional Disk Space to the VM-Series Firewall

Learn how to add more disk space to your VM-Series firewall.

Where Can I Use This?	What Do I Need?
ESXi Server	VM-Series Firewall License (BYOL) Panorama VM-Series Plugin Panorama plugin for ESXi

For PAN-OS 11.1.x and later versions, the VM-Series firewall requires a 60GB virtual disk, of which 11GB is used for logging by default, and expandable. This is not applicable if you are upgrading the VM-Series firewall from PAN-OS 11.0.x or before version.

For PAN-OS 11.1.x and later versions, the disk space on VM-Series firewall is partitioned as follows:

Disk Space	Purpose
1G	Boot Partition
12G	sysroot0
12G	sysroot1
16G	pan configurations
8G	pan repository
11G	pan logs (expandable)

For large deployments, use Panorama to aggregate data from all next-generation firewalls, and provide visibility across all the traffic on your network. Panorama provides centralized logging and reporting.
In smaller deployments where you do not use Panorama, you can add a new virtual disk to increase log storage capacity. The new virtual disk can support 60GB to 2TB of storage capacity for logs. This task is described below.

When the virtual appliance is configured to use a virtual disk, the VM-Series firewall no longer stores logs. If the appliance loses connectivity to the virtual disk, logs can be lost during the failure interval. If necessary, place the newly created virtual disk on a datastore that provides RAID redundancy. RAID10 provides the best write performance for applications with high logging characteristics.

Power off the VM-Series firewall.
On the ESXi server, add the virtual disk to the firewall.
1. Select the VM-Series firewall on the ESXi server.
2. Click Edit Settings.
3. Click Add to launch the Add Hardware wizard, and select the following options when prompted:
  Select Hard Disk for the hardware type.
  Select Create a new virtual disk.
  Select SCSI as the virtual disk type.
  Select the Thick provisioning disk format.
  In the location field, select Store with the virtual machine option. The datastore does not have to reside on the ESXi server.
  Verify that the settings look correct and click Finish to exit the wizard. The new disk is added to the list of devices for the virtual appliance.
Power on the firewall.
Powering on the firewall initializes the virtual disk for first-time use. The time that the initialization process takes to complete varies by the size of the new virtual disk.
When the new virtual disk is initialized and ready, PAN-OS moves all logs from the existing disk to the new virtual disk. New log entries are now written to this new virtual disk.
PAN-OS also generates a system log entry that records the new disk.

If you reuse a virtual disk that was previously used for storing PAN-OS logs, all logs from the existing disk are overwritten.
Verify the size of the new virtual disk.
1. Select DeviceSetupManagement.
2. In the Logging and Reporting Settings section, verify that the Log Storage capacity accurately displays new disk capacity.

Perform Initial Configuration on the VM-Series on ESXi

Use VMware Tools on the VM-Series Firewall on ESXi and vCloud Air

VM-Series Firewall Docs

Add Additional Disk Space to the VM-Series Firewall

VM-Series Firewall Docs

Add Additional Disk Space to the VM-Series Firewall

Activation and Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Network Security

Endpoints

Resources