Install Panorama on an ESXi Server

Download the Panorama 10.0 base image Open Virtual Appliance (OVA) file.
Go to the Palo Alto Networks software downloads site. (If you can’t log in, go to the Palo Alto Networks Customer Support web site for assistance.)
In the Download column in the Panorama Base Images section, download the latest version of the Panorama release OVA file (
Panorama-ESX-10.0.0.ova
).
Install Panorama.
Launch the VMware vSphere Client and connect to the VMware server.
Select
File
Deploy OVF Template
.
Browse
to select the Panorama OVA file and click
Next
.
Confirm that the product name and description match the downloaded version, and click
Next
.
Enter a descriptive name for the Panorama virtual appliance, and click
Next
.
Select a datastore location (system disk) on which to install the Panorama image. See the Setup Prerequisites for the Panorama Virtual Appliance for the supported system disk sizes. After selecting the datastore, click
Next
.
Select
Thick Provision Lazy Zeroed
as the disk format, and click
Next
.
Specify which networks in the inventory to use for the Panorama virtual appliance, and click
Next
.
Confirm the selected options, click
Finish
to start the installation process, and click
Close
when it finishes. Do not power on the Panorama virtual appliance yet.
Configure resources on the Panorama virtual appliance.
Right-click the Panorama virtual appliance and
Edit Settings
.
In the
Hardware
settings, allocate the CPUs and memory as necessary.
The virtual appliance boots up in Panorama mode if you allocate sufficient
CPUs
and
Memory
and add a virtual logging disk (later in this procedure). Otherwise, the appliance boots up in Management Only mode. For details on the modes, see Panorama Models.
Set the
SCSI Controller
to
LSI Logic Parallel
.
(
Optional
) Add a virtual logging disk.
This step is required in the following scenarios:
In Panorama mode to store logs on a dedicated logging disk.
Manage your SD-WAN deployment in Management Only mode.
Add
a disk, select
Hard Disk
as the hardware type, and click
Next
.
Create a new virtual disk
and click
Next
.
Set the
Disk Size
to exactly 2TB.
In Panorama mode, you can later add additional logging disks (for a total of 12) with 2TB of storage each. Expanding the size of a logging disk that is already added to Panorama is not supported.
Select your preferred
Disk Provisioning
disk format.
Consider your business needs when selecting the disk provisioning format. For more information regarding the disk provisioning performance considerations, refer to the VMware Thick vs Thin Disks and All Flash Arrays document, or additional VMware documentation.
When adding multiple logging disks, it is a best practice to select the same
Disk Provisioning
format for all disks to avoid any unexpected performance issues that may arise.
Select
Specify a datastore or datastore structure
as the location,
Browse
to a datastore that has sufficient storage, click
OK
, and click
Next
.
Select a SCSI
Virtual Device Node
(you can use the default selection) and click
Next
.
Panorama will fail to boot if you select a format other than SCSI.
Verify that the settings are correct and click
Finish
.
Click
OK
to save your changes.
Power on the Panorama virtual appliance.
In the vSphere Client, right-click the Panorama virtual appliance and select
Power
Power On
. Wait for Panorama to boot up before continuing.
Verify that the virtual appliance is running in the correct mode:
Right-click the Panorama virtual appliance and select
Open Console
.
Enter your username and password to log in (default is
admin
for both).
Configure a new administrative password for the Panorama virtual appliance.
You must configure a unique administrative password before you can access the web interface or CLI of the Panorama virtual appliance. The new password must be a minimum of eight characters and include a minimum of one lowercase character, one uppercase character, and one number or special character.
When you first log in to the Panorama CLI, you are prompted to enter the
Old Password
and the
New Password
for the
admin
user before you can continue.
Verify the Panorama is running the correct system mode.
admin> 
show system info
In the output, the
system-mode
indicates either
panorama
or
management-only
mode.
Register the Panorama virtual appliance and activate the device management license and support licenses.
(
VM Flex Licensing Only
) Provisioning the Panorama Virtual Appliance Serial Number.
When leveraging VM Flex licensing, this step is required to generate the Panorama virtual appliance serial number needed to register the Panorama virtual appliance with the Palo Alto Networks Customer Support Portal (CSP).
Register Panorama.
You must register the Panorama virtual appliance using the serial number provided by Palo Alto Networks in the order fulfillment email.
This step is not required when leveraging VM Flex licensing as the serial number is automatically registered with the CSP when generated.
Activate the firewall management license.
Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is Internet-connected.
Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is not Internet-connected.
Activate a Panorama Support License.
Increase the System Disk for Panorama on an ESXi Server if you intend to use the Panorama virtual appliance for the following:
Manage your SD-WAN deployment in Panorama mode.
Requires additional storage space for dynamic updates when managing large-scale firewall deployments.
Complete configuring the Panorama virtual appliance for your deployment needs.
For Panorama in Log Collector Mode.
Add a Virtual Disk to Panorama on an ESXi Server as needed.
Adding at least one virtual logging disk is required before you can change the Panorama virtual appliance to Log Collector mode.
Begin at Step 6 to switch to Log Collector mode.
Enter the Public IP address of the Dedicated Log Collector when you add the Log Collector as a managed collector to the Panorama management server. You cannot specify the
IP Address
,
Netmask
, or
Gateway
.
For Panorama in Panorama mode.
Add a Virtual Disk to Panorama on an ESXi Server.
Adding at least one virtual logging disk is required before you can change the Panorama virtual appliance to Panorama mode.
Set up a Panorama Virtual Appliance in Panorama Mode.
Configure a Managed Collector.
For Panorama in Management Only mode.
Set up a Panorama Virtual Appliance in Management Only Mode.
Configure a Managed Collector to add a Dedicated Log Collector to the Panorama virtual appliance.
Management Only mode does not support local log collection, and requires a Dedicated Log Collector to store managed device logs.
For SD-WAN deployments.
Increase the System Disk for Panorama on an ESXi Server
To leverage SD-WAN on Panorama deployed on ESXi, you must increase the system disk to 224GB.
You cannot migrate back to a 81GB system disk after successfully increasing the system disk to 224GB.
Set up a Panorama Virtual Appliance in Management Only Mode.
Add a Virtual Disk to Panorama on an ESXi Server.
To leverage SD-WAN, you must add a single 2TB logging disk to Panorama in Management Only mode.