Plan Your Cortex Data Lake Deployment

Use the Cortex Data Lake Estimator to calculate the amount of storage you need in Cortex Data Lake.
On your firewalls and Panorama appliances, allow access to the ports and FQDNs required to connect to
Cortex Data Lake
. If using a proxy server, allow the same ports and FQDNs on the server without SSL decryption.
Ensure that you are not decrypting traffic to
Cortex Data Lake
.
Ensure that the firewalls and the
Cortex Data Lake
instance to which you want to send their logs are registered to the same customer support account. Firewalls cannot send logs to a
Cortex Data Lake
instance registered to a different account.
Consider that a Panorama™ appliance or firewall running PAN-OS
®
9.1 and earlier versions cannot connect to Cortex Data Lake from behind a proxy (Cortex Data Lake requires mutual authentication).
You can, however, enable proxy communication on PAN-OS 10.0 and later versions:
On a Panorama appliance:
Setup
Services

Use proxy to send logs to Cortex Data Lake
.
On a firewall:
Device
Setup
Services

Use proxy to send logs to Cortex Data Lake
Ensure that your firewalls meet the software version requirements for your deployment style: Panorama-managed or individually managed.
The process to activate
Cortex Data Lake
can vary depending on the other products you’re using (see Cortex Data Lake License).
If you’re using Panorama or Prisma™ Access, review this additional list of requirements to make sure that you have everything you need to get started with Cortex Data Lake.

Activate Cortex Data Lake.
Allocate Storage Based on Log Type.
Onboard Firewalls to Cortex Data Lake.
Start Sending Logs to Cortex Data Lake.