Increased Device Management Capacity Requirements

System requirements for managing up to 5,000 firewalls using an M-600 appliance or up to 2,500 firewalls using a Panorama™ virtual appliance.
You can manage up to 5,000 firewalls using a single M-600 appliance in Management Only mode or manage up to 2,500 firewalls using a single Panorama virtual appliance in Management Only mode. Managing such large deployments from a single Panorama management server alleviates the operational complexity of configuration management and reduces the security and compliance risk of managing multiple Panorama management servers.
For log collection, a single Panorama management server is ideal because it provides a centralized location to view and analyze log data from managed devices rather than requiring you to access each individual Panorama management server. To provide redundancy in the event of system or network failure, Palo Alto Networks recommends deploying two Panorama management servers in a high availability (HA) configuration.
For generating pre-defined reports, you must enable Panorama to use Panorama data for pre-defined reports. This generates pre-defined reports using log data already collected by Panorama or the Dedicated Log Collector, which reduces the resource utilization when generating reports. Enabling this setting is required, otherwise Panorama performance may be impacted, and Panorama may become unresponsive.
To manage up to 5,000 firewalls, the Panorama management server must meet the following minimum requirements:
Requirement
M-Series Appliance
Panorama Virtual Appliance
Model
M-600
All supported Panorama hypervisors. For more information, see Panorama Models.
Panorama Mode
Management Only
Management Only
Number of managed firewalls
5,000
2,500
System Disk
240GB SSD—Used to store the operating system files and system logs.
  • 81GB—Used to store the operating system files and system logs.
  • Additional disk with a minimum 90GB capacity.
Cores
28 (with Hyper-Threaded)
28 (with Hyper-Threaded)
Memory
256GB
250GB
Log Collection
Local log collection is not supported.
See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Local log collection is not supported.
See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Logging and Reporting
Enable the
Use Panorama Data for Pre-Defined Reports
setting (
Panorama
Setup
Management
Logging and Reporting Settings
Log Export and Reporting
)
Enable the
Use Panorama Data for Pre-Defined Reports
setting (
Panorama
Setup
Management
Logging and Reporting Settings
Log Export and Reporting
)

Recommended For You