Panorama Virtual Appliance and Virtual Dedicated Log Collector on Hyper-V

Download the VHDX file from the Palo Alto Networks Support Portal.
Set up any vSwitch(es) that you will need. For more information, review the Virtual Switch Types for more information.
Install the Panorama virtual appliance.
On the Hyper-V Manager, select the host and select
Action
New
Virtual Machine.
Configure the following settings in the New Virtual Machine Wizard:
Choose a
Name
and
Location
for the Panorama virtual appliance. The Panorama virtual appliance stores the VHDX file at the specified location.
Choose
Generation 1
. This is the default option and the only version supported.
For
Startup Memory
, assign the memory based on the intended system mode. See the Setup Prerequisites for the Panorama Virtual Appliance for the memory requirements for each mode.
Do not enable dynamic memory; the Panorama virtual appliance requires static memory allocation.
Configure
Networking
. Select an external vSwitch to connect the management interface on the firewall.
To connect the
Virtual Hard Disk
, select
Use an existing virtual hard disk
and browse to the VHDX file you downloaded earlier.
Review the summary and click
Finish
.
Allocate the Panorama virtual appliance CPU cores.
Review the Setup Prerequisites for the Panorama Virtual Appliance for minimum resource requirements.
If you plan to use the Panorama virtual appliance as a Dedicated Log Collector, ensure that you configure the appliance with the required resources during initial deployment. The Panorama virtual appliance does not remain in Log Collector mode if you resize the virtual machine after you deploy it, and this results in a loss of log data.
In the
Hardware
list, select
Processor
.
Edit the currently allocated
Number of virtual processors
.
Connect at least one network adapter for the dataplane interface on the firewall. Repeat this to create additional network interfaces on the Panorama virtual appliance.
Select
Settings
Hardware
Add Hardware
and select the
Hardware type
for your network adapter.
Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
Click
OK
.
(
Panorama and Log Collector mode
) Add additional storage for log collection. Repeat this step as needed to add additional virtual logging disks. If you want to deploy the Panorama virtual appliance in Management Only mode, continue to Step 7.
If you intend to use the Panorama virtual appliance in Panorama mode or as a Dedicated Log Collector, add the virtual logging disks during the initial deployment. By default, the Panorama virtual appliance is in Panorama mode for the initial deployment when you meet the Panorama mode resource requirements and have added at least one virtual logging disk.
The Panorama virtual appliance on Hyper-V only supports 2TB logging disks, and in total supports up to 24TB of log storage. You are unable to add a logging disk smaller than 2TB, or a logging disk with a size not divisible by the 2TB logging disk requirement. The Panorama virtual appliance partitions logging disks larger than 2TB into 2TB partitions.
On the Hyper-V Manager, select the host and select
Action
New
Hard Disk.
If you see the Before You Begin prompt, click
Next
to begin adding the virtual logging disk.
For the Disk Format, select
VHDX
. Click
Next
. to continue
For the Disk Type, select
Fixed Size
or
Dynamically Expanding
based on your needs. Click
Next
to continue.
Specify the
Name
and
Location
for the virtual logging disk file. Click
Next
to continue.
To configure the disk, select
Create a new virtual hard disk
and enter the disk size. Click
Next
to continue.
Review the Summary and
Finish
adding the virtual hard logging disk.
Power on the Panorama virtual appliance.
Configure the IP address of the management interface.
Configure a new administrative password for the Panorama virtual appliance.
You must configure a unique administrative password before you can access the web interface of the Panorama virtual appliance. To access the CLI, the private key used to launch the Panorama virtual appliance is required.
Activate the licenses on the Panorama virtual appliance.
Complete configuring the Panorama virtual appliance for your deployment needs.
(
Management Only mode
) Set Up a Panorama Virtual Appliance in Management Only Mode.
(
Log Collector mode
) Begin at Step 6 to set up the Panorama virtual appliance as a Log Collector.
When configuring the Management interface in Step 9.3, enter the
Public IP Address
of the Dedicated Log Collector. You do not have the option to enter the
IP Address
,
Netmask
, or
Gateway
.
(
Panorama and Management Only mode
) Configure a Managed Collector. Manage a Dedicated Log Collector from the Panorama virtual appliance for log collection of managed firewalls.