Focus

Panorama Administrator's Guide

Increased Device Management Capacity Requirements

Table of Contents

Increased Device Management Capacity Requirements

System requirements for managing up to 5,000 firewalls using an M-600 appliance or up to 2,500 firewalls using a Panorama™ virtual appliance.

You can manage up to 5,000 firewalls using a single M-600 appliance in Management Only mode or manage up to 2,500 firewalls using a single Panorama virtual appliance in Management Only mode. Managing such large deployments from a single Panorama management server alleviates the operational complexity of configuration management and reduces the security and compliance risk of managing multiple Panorama management servers.

For log collection, a single Panorama management server is ideal because it provides a centralized location to view and analyze log data from managed devices rather than requiring you to access each individual Panorama management server. To provide redundancy in the event of system or network failure, Palo Alto Networks recommends deploying two Panorama management servers in a high availability (HA) configuration. For Panorama system and config logs, an additional disk with a minimum 92GB capacity is required. This additional disk is automatically detected by the Panorama virtual appliance when Panorama is rebooted and mounted as a partition for system and config log storage.

For generating pre-defined reports, you must enable Panorama to use Panorama data for pre-defined reports. This generates pre-defined reports using log data already collected by Panorama or the Dedicated Log Collector, which reduces the resource utilization when generating reports. Enabling this setting is required, otherwise Panorama performance may be impacted, and Panorama may become unresponsive.

To manage up to 5,000 firewalls, the Panorama management server must meet the following minimum requirements:

Requirement	M-Series Appliance	Panorama Virtual Appliance
Model	M-600	All supported Panorama hypervisors. For more information, see Panorama Models.
Panorama Mode	Management Only	Management Only
Number of managed firewalls	5,000	2,500
System Disk	240GB SSD—Used to store the operating system files and system logs.	81GB—Used to store the operating system files and system logs. Additional disk with a minimum 92GB capacity used for storing Panorama system and config logs.
CPUs	56	32
Memory	256GB	256GB
Log Collection	Local log collection is not supported. See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Logging and Reporting	Enable the Use Panorama Data for Pre-Defined Reports setting (PanoramaSetupManagementLogging and Reporting SettingsLog Export and Reporting)

Increased Device Management Capacity for M-600 and Panorama Virtual Appliance

Install Panorama for Increased Device Management Capacity