Focus

Panorama Administrator's Guide

Increased Device Management Capacity Requirements

Table of Contents

Increased Device Management Capacity Requirements

System requirements for managing large-scale firewall deployments using the Panorama™ management server.

You can manage up to 5,000 firewalls using a single M-600, M-700 appliance, or Panorama™ virtual appliance installed on VMware ESXi, or up to 2,500 firewalls with all other supported Panorama virtual appliances. For managing such large deployments from a single Panorama management server alleviates the operational complexity of configuration management and reduces the security and compliance risk of managing multiple Panorama management servers.

For log collection, a single Panorama management server is ideal because it provides a centralized location to view and analyze log data from managed devices rather than requiring you to access each individual Panorama management server. To provide redundancy in the event of system or network failure, Palo Alto Networks recommends deploying two Panorama management servers in a high availability (HA) configuration. For Panorama system and config logs, an additional disk with a minimum 92GB capacity is required. This additional disk is automatically detected by the Panorama virtual appliance when Panorama is rebooted and mounted as a partition for system and config log storage.

For generating pre-defined reports, you must enable Panorama to use Panorama data for pre-defined reports. This generates pre-defined reports using log data already collected by Panorama or the Dedicated Log Collector, which reduces the resource utilization when generating reports. Enabling this setting is required, otherwise Panorama performance may be impacted, and Panorama may become unresponsive.

To manage up to 5,000 firewalls, the Panorama management server must meet the following minimum requirements:

Requirement	5,000 Firewalls	2,500 Firewalls
Model	M-600 M-700 VMware ESXi	All supported Panorama hypervisors. For more information, see Panorama Models.
Panorama Mode	Management Only	Management Only
System Disk	Used to store the operating system files, system logs, software updates, and content updates. M-Series Appliances—240GB SSD ESXi—224GB You must manually increase the system disk to 224GB.	81GB—Used to store the operating system files and system logs. Additional disk with a minimum 92GB capacity used for storing Panorama system and config logs.
CPUs	56	32
Memory	256GB	256GB
Log Collection	Local log collection is not supported. See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Logging and Reporting	Enable the Use Panorama Data for Pre-Defined Reports setting (PanoramaSetupManagementLogging and Reporting SettingsLog Export and Reporting)

Increased Device Management Capacity for M-Series and Panorama Virtual Appliance

Install Panorama for Increased Device Management Capacity