The Panorama M-600, M-500, M-200 and M-100 appliances
have several interfaces for communicating with other systems such
as managed firewalls and the client systems of Panorama administrators.
Panorama communicates with these systems to perform various services,
including managing devices (firewalls, Log Collectors, and WildFire
appliances and appliance clusters), collecting logs, communicating
with Collector Groups, deploying software and content updates to devices,
and providing administrative access to Panorama. By default, Panorama
uses its management (MGT) interface for all these services. However,
you can improve security by reserving the MGT interface for administrative
access and dedicating separate interfaces for the other services.
In a large-scale network with multiple subnetworks and heavy log
traffic, using multiple interfaces for device management and log
collection also enables network segmentation and load balancing
Panorama to Use Multiple Interfaces).
When assigning Panorama services to various interfaces, keep
in mind that only the MGT interface allows administrative access
to Panorama for configuration and monitoring tasks. You can assign
any interface to the other services when you Perform
Initial Configuration of the M-Series Appliance. The M-Series Appliance Hardware Reference Guides explain
where to attach cables for the interfaces. The M-100 appliance support
1Gbps throughput on all its interfaces: MGT, Eth1, Eth2, and Eth3.
In addition to these interfaces, the M-500 appliance supports 10Gbps
throughput on its Eth4 and Eth5 interfaces.
The M-Series appliances do not support Link Aggregation
Control Protocol (LACP) for aggregating interfaces.