The Panorama M-500 and M-100 appliances have several
interfaces for communicating with other systems such as managed
firewalls and the client systems of Panorama administrators. Panorama communicates
with these systems to perform various services, including managing
devices (firewalls, Log Collectors, and WildFire appliances and
appliance clusters), collecting logs, communicating with Collector
Groups, deploying software and content updates to devices, and providing
administrative access to Panorama. By default, Panorama uses its
management (MGT) interface for all these services. However, you
can improve security by reserving the MGT interface for administrative
access and dedicating separate interfaces for the other services.
In a large-scale network with multiple subnetworks and heavy log
traffic, using multiple interfaces for device management and log
collection also enables network segmentation and load balancing
(see
Configure Panorama to Use Multiple Interfaces).