Plan Your Cortex Data Lake Deployment

Requirements and tips for planning your Cortex Data Lake deployment.
Here are some requirements and tips to consider as you plan your Cortex™ Data Lake deployment:
  • Use the Cortex Data Lake Estimator to calculate the amount of storage you need in Cortex Data Lake.
  • On your firewalls and Panorama appliances, allow access to the ports and FQDNs required to connect to
    Cortex Data Lake
    . If using a proxy server, allow the same ports and FQDNs on the server without SSL decryption.
  • Ensure that you are not decrypting traffic to
    Cortex Data Lake
    .
  • Ensure that the firewalls and the
    Cortex Data Lake
    instance to which you want to send their logs are registered to the same customer support account. Firewalls cannot send logs to a
    Cortex Data Lake
    instance registered to a different account.
  • Consider that a Panorama™ appliance or firewall running PAN-OS
    ®
    9.1 and earlier versions cannot connect to Cortex Data Lake from behind a proxy (Cortex Data Lake requires mutual authentication).
    You can, however, enable proxy communication on PAN-OS 10.0 and later versions:
    • On a Panorama appliance:
      Setup
      Services
      Use proxy to send logs to Cortex Data Lake
      .
    • On a firewall:
      Device
      Setup
      Services
      Use proxy to send logs to Cortex Data Lake
  • Ensure that your firewalls meet the software version requirements for your deployment style: Panorama-managed or individually managed.
  • The process to activate
    Cortex Data Lake
    can vary depending on the other products you’re using (see Cortex Data Lake License).
  • If you’re using Panorama or Prisma™ Access, review this additional list of requirements to make sure that you have everything you need to get started with Cortex Data Lake.
When you have your plan finalized, here’s what you need to do to roll out your Cortex Data Lake deployment:

Recommended For You