Depending on your platform, use the VMware vSphere Client or vCloud Air web console to set up network access to the Panorama virtual appliance. For unified reporting, consider using Greenwich Mean Time (GMT) or Coordinated Universal Time (UTC) as the uniform time zone across Panorama and all the managed firewalls and Log Collectors.
.
Perform Initial Configuration of the Panorama Virtual Appliance
Gather the required information from your network administrator. IP address for the management (MGT) interface Netmask Default gateway DNS server IP address
Access the console of the Panorama virtual appliance. Access the console. On an ESXi server: Launch the VMware vSphere Client. Select the Console tab for the Panorama virtual appliance and press enter to access the login screen. On vCloud Air: Access the vCloud Air web console and select your Virtual Private Cloud OnDemand region. Select the Virtual Machines tab, right-click the Panorama virtual machine, and select Open In Console. Enter your username and password to log (default is admin for both). Enter configure to switch to Configuration mode.
Configure the network access settings for the MGT interface. Panorama uses the MGT interface for management traffic, high availability synchronization, log collection, and communication within Collector Groups. Enter the following command, where <Panorama-IP> is the IP address you want to assign to the Panorama management interface, <netmask> is the subnet mask, <gateway-IP> is the IP address of the network gateway, and <DNS-IP> is the IP address of the DNS server: set deviceconfig system ip-address <Panorama-IP> netmask <netmask> default-gateway <gateway-IP> dns-setting servers primary <DNS-IP> Enter commit to commit your changes. Enter exit to exit Configuration mode. Use the ping utility to verify network access to external services required for firewall management, such as the default gateway, DNS server, and the Palo Alto Networks Update Server, as shown in the following example: admin@Panorama-Corp> ping host updates.paloaltonetworks.com PING updates.paloaltonetworks.com (67.192.236.252) 56(84) bytes of data. 64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=40.5 ms 64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=53.6 ms 64 bytes from 67.192.236.252: icmp_seq=1 ttl=243 time=79.5 ms After verifying connectivity, press Ctrl+C to stop the pings.
Configure the general settings. Using a secure connection (HTTPS) from a web browser, log in to the Panorama web interface using the IP address and password you assigned to the management interface (https://<IP address>). Select Panorama > Setup > Management and edit the General Settings. Enter a Hostname for the server and enter the network Domain name. The domain name is just a label; Panorama doesn’t use it to join the domain. Align the clock on Panorama and the managed firewalls to use the same Time Zone, for example GMT or UTC. Timestamps are recorded when Panorama receives the logs and the managed firewalls generate the logs. Aligning the time zones on Panorama and the firewalls ensures that the timestamps are synchronized and the process of querying logs and generating reports on Panorama is harmonious. Enter the Latitude and Longitude to enable accurate placement of the Panorama management server on the world map. Enter the Serial Number you received in the order fulfillment email. Click OK to save your changes.
Change the default administrator password. To ensure that the management interface remains secure, configure the Minimum Password Complexity ( Panorama > Setup > Management). Click the admin link on the left side of the web interface footer. Enter the Old Password and the New Password in the appropriate fields and record the new password in a safe location. Click OK.
( Optional ) Modify the management interface settings. Select Panorama > Setup > Management and edit the Management Interface Settings. Select which management services to allow on the interface (for example, Secure Shell ( SSH) access) As a best practice, don’t select Telnet or HTTP. These services use plaintext and are less secure than the other services. Click OK.
Save your configuration changes. Click Commit, for the Commit Type select Panorama, and click Commit again.
Next steps... If necessary, Expand Log Storage Capacity on the Panorama Virtual Appliance. Best practice is to replace the default certificate that Panorama uses to secure HTTPS traffic over the management (MGT) interface. After completing these optional tasks, you can Complete the Panorama Virtual Appliance Setup.

Related Documentation