M-Series Appliance Interfaces
Table of Contents
M-Series Appliance Interfaces
The Panorama M-600, M-500, M-200 and M-100 appliances
have several interfaces for communicating with other systems such
as managed firewalls and the client systems of Panorama administrators.
Panorama communicates with these systems to perform various services,
including managing devices (firewalls, Log Collectors, and WildFire
appliances and appliance clusters), collecting logs, communicating
with Collector Groups, deploying software and content updates to
devices, and providing administrative access to Panorama. By default,
Panorama uses its management (MGT) interface for all these services.
However, you can improve security by reserving the MGT interface
for administrative access and dedicating separate interfaces for
the other services. In a large-scale network with multiple subnetworks
and heavy log traffic, using multiple interfaces for device management
and log collection also enables network segmentation and load balancing
(see Configure
Panorama to Use Multiple Interfaces).
When assigning Panorama services to various interfaces, keep
in mind that only the MGT interface allows administrative access
to Panorama for configuration and monitoring tasks. You can assign
any interface to the other services when you Perform
Initial Configuration of the M-Series Appliance. The M-Series
Appliance Hardware Reference Guides explain where to attach
cables for the interfaces. The M-100 appliance support 1Gbps throughput
on all its interfaces: MGT, Eth1, Eth2, and Eth3. In addition to
these interfaces, the M-500 appliance supports 10Gbps throughput
on its Eth4 and Eth5 interfaces.
The M-Series appliances do not support Link Aggregation
Control Protocol (LACP) for aggregating interfaces.
Supported Interfaces
Interfaces can be used for device management, log collection,
Collector Group communication, licensing and software updates. See Configure Panorama to Use Multiple Interfaces for more
information on network segmentation.
Interface | Maximum Speed | M-600 Appliance | M-500 Appliance | M-200 Appliance |
|---|---|---|---|---|
Management (MGT) | 1Gbps | 
|
|
|
Ethernet 1 (Eth1) | 1Gbps |
|
|
|
Ethernet 2 (Eth2) | 1Gbps |
|
|
|
Ethernet 3 (Eth3) | 1Gbps |
|
|
|
Ethernet 4 (Eth4) | 10Gbps |
|
| — |
Ethernet 5 (Eth5) | 10Gbps |
|
| — |
Logging Rates
Review the logging rates for the all M-Series appliance
models. To achieve the logging rates listed below, the M-Series
appliance must be a single log collector in a collector group and
you must install all the logging disks for your M-Series model.
For example, to achieve 30,000 logs/second for the M-500 appliance,
you must install all 12 logging disks with either 1TB or 2TB disks.
Model Capacities and
Features | M-600 Appliance | M-500 Appliance | M-200 Appliance |
|---|---|---|---|
Maximum Logging Rate for Panorama in Management Only
mode | Local log storage is not supported | ||
Maximum Logging Rate for Panorama in Panorama
Mode | 25,000 logs/second | 20,000 logs/second | 10,000 logs/second |
Maximum Logging Rate for Panorama in Log
Collector Mode | 50,000 logs/second | 30,000 logs/second | 28,000 logs/second |
Maximum Log Storage on Appliance | 48TB (12x8TB RAID disk) |
| 16TB (4x8TB RAID disk) |
Default Log Storage on Appliance | 16TB (4x8TB RAID disks) | 4TB (4x2TB RAID disks) | 16TB (4x8TB RAID disks) |
SSD Storage on Appliance (for logs that
M-Series appliances generate) | 240GB | 240GB | 240GB |
NFS Attached Log Storage | Not available | ||