Plan Your

Cortex Data Lake

Deployment

Use the Cortex Data Lake Estimator to calculate the amount of storage you need in
Cortex Data Lake
.
On your firewalls and Panorama appliances, allow access to the ports and FQDNs required to connect to
Cortex Data Lake
. If using a proxy server, allow the same ports and FQDNs on the server without SSL decryption.
Ensure that you are not decrypting traffic to
Cortex Data Lake
.
Ensure that the firewalls and the
Cortex Data Lake
instance to which you want to send their logs are registered to the same customer support account. Firewalls cannot send logs to a
Cortex Data Lake
instance registered to a different account.
Consider that a Panorama™ appliance or firewall running PAN-OS
®
9.1 and earlier versions cannot connect to
Cortex Data Lake
from behind a proxy (
Cortex Data Lake
requires mutual authentication).
You can, however, enable proxy communication on PAN-OS 10.0 and later versions:
On a Panorama appliance:
Setup
Services

Use proxy to send logs to
Cortex Data Lake
.
On a firewall:
Device
Setup
Services

Use proxy to send logs to
Cortex Data Lake
Ensure that your firewalls meet the software version requirements for your deployment style:
Prisma Access (Panorama Managed)
or individually managed.
The process to activate
Cortex Data Lake
can vary depending on the other products you’re using (see Cortex Data Lake License).
If you’re using Panorama or
Prisma Access
, review this additional list of requirements to make sure that you have everything you need to get started with
Cortex Data Lake
.

Activate Cortex Data Lake.
Allocate Storage Based on Log Type.
Onboard Firewalls to Cortex Data Lake.
Start Sending Logs to Cortex Data Lake.