Install Panorama on Hyper-V
How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector on Hyper-V.
You can now deploy Panorama™ and a Dedicated Log Collector on Hyper-V. Panorama deployed on Hyper-V is Bring Your Own License (BYOL), supports all deployment modes (Panorama, Log Collector, and Management Only), and shares the same processes and functionality as the M-Series hardware appliances. For more information on Panorama modes, see Panorama Models. Panorama virtual appliance and virtual Dedicated Log Collector on Hyper-V is available only on PAN-OS 8.1.3 and later releases.
- Download the VHDX file.
- Log in to the Palo Alto Networks Support Portal.
- Select UpdatesSoftware Updates, filter by Panorama Base Images, and download the VHDX file.
- Set up any vSwitch(es) that you will need. For more information,
review the Virtual Switch Types for
- From Hyper-V Manager, select the host and select ActionVirtual Switch Manager to open the Virtual Switch Manager window.
- Under Create virtual switch, select the type of vSwitch to create and click Create Virtual Switch.
- Install the Panorama virtual appliance.
- On the Hyper-V Manager, select the host
and select ActionNewVirtual Machine. Configure
the following settings in the New Virtual Machine Wizard:
- Choose a Name and Location for the Panorama virtual appliance. The Panorama virtual appliance stores the VHDX file at the specified location.
- Choose Generation 1. This is the default option and the only version supported.
- For Startup Memory, assign the memory based on the intended system mode. See the Setup Prerequisites for the Panorama Virtual Appliance for the memory requirements for each mode.Do not enable dynamic memory; the Panorama virtual appliance requires static memory allocation.
- Configure Networking. Select an external vSwitch to connect the management interface on the firewall.
- To connect the Virtual Hard Disk, select Use an existing virtual hard disk and browse to the VHDX file you downloaded earlier.
- Review the summary and click Finish.
- On the Hyper-V Manager, select the host and select ActionNewVirtual Machine. Configure the following settings in the New Virtual Machine Wizard:
- Allocate the Panorama virtual appliance CPU cores.Review the Setup Prerequisites for the Panorama Virtual Appliance for minimum resource requirements.If you plan to use the Panorama virtual appliance as a Dedicated Log Collector, ensure that you configure the appliance with the required resources during initial deployment. The Panorama virtual appliance does not remain in Log Collector mode if you resize the virtual machine after you deploy it, and this results in a loss of log data.
- In the Hardware list, select Processor.
- Edit the currently allocated Number of virtual processors.
- Connect at least one network adapter for the dataplane
interface on the firewall. Repeat this to create additional network
interfaces on the Panorama virtual appliance.
- Select SettingsHardwareAdd Hardware and
select the Hardware type for your network
adapter.Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
- Click OK.
- Select SettingsHardwareAdd Hardware and select the Hardware type for your network adapter.
- (Panorama and Log Collector mode) Add additional
storage for log collection. Repeat this step as needed to add additional
virtual logging disks. If you want to deploy the Panorama virtual
appliance in Management Only mode, continue to Step
6.If you intend to use the Panorama virtual appliance in Panorama mode or as a Dedicated Log Collector, add the virtual logging disks during the initial deployment. By default, the Panorama virtual appliance is in Panorama mode for the initial deployment when you meet the Panorama mode resource requirements and have added at least one virtual logging disk. Otherwise, the Panorama virtual appliance defaults to Management Only mode. Change the Panorama virtual appliance to Management Only mode if you just want to manage devices and Dedicated Log Collectors, and to not collect logs locally.The Panorama virtual appliance on Hyper-V only supports 2TB logging disks, and in total supports up to 24TB of log storage. You are unable to add a logging disk smaller than 2TB, or a logging disk with a size not divisible by the 2TB logging disk requirement. The Panorama virtual appliance partitions logging disks larger than 2TB into 2TB partitions.
- On the Hyper-V Manager, select the host and select ActionNewHard Disk.
- If you see the Before You Begin prompt, click Next to begin adding the virtual logging disk.
- For the Disk Format, select VHDX. Click Next. to continue
- For the Disk Type, select Fixed Size or Dynamically Expanding based on your needs. Click Next to continue.
- Specify the Name and Location for the virtual logging disk file. Click Next to continue.
- To configure the disk, select Create a new virtual hard disk and enter the disk size. Click Next to continue.
- Review the Summary and Finish adding the virtual hard logging disk.
- Power on
the Panorama virtual appliance.
- Select the Panorama virtual appliance instance from the list of Virtual Machines.
- Select ActionStart to power on the Panorama virtual appliance.
- Configure the IP address of the management interface.If you have a DHCP service enabled on the virtual switch network, you can skip this step.
- In the Virtual Machines list, select the Panorama virtual appliance.
- Select ActionsConnect and enter the username and password to log in (default is admin for both).
- Enter the following commands, where <Panorama-IP> is
the IP address you want to assign to the Panorama management interface, <netmask> is
the subnet mask, <gateway-IP> is the IP address
of the network gateway, and <DNS-IP> is the
IP address of the DNS server:
admin> configure admin# set deviceconfig system ip-address <Panorama-IP> netmask <netmask> default-gateway <gateway-IP> dns-setting servers primary <DNS-IP> admin# commit admin# exit
- Use the ping utility to verify network access to external
services required for firewall management, such as the default gateway,
DNS server, and the Palo Alto Networks Update Server, as shown in
the following example:
admin@Panorama-Corp> ping host updates.paloaltonetworks.com PING updates.paloaltonetworks.com (18.104.22.168) 56(84) bytes of data. 64 bytes from 22.214.171.124: icmp_seq=1 ttl=243 time=40.5 ms 64 bytes from 126.96.36.199: icmp_seq=1 ttl=243 time=53.6 ms 64 bytes from 188.8.131.52: icmp_seq=1 ttl=243 time=79.5 msAfter verifying connectivity, press Ctrl+C to stop the pings.
- Activate the device management license and support license on the Panorama virtual appliance.
- Complete configuring the Panorama virtual appliance for
your deployment needs.
- (Management Only mode) Set up a Panorama Virtual Appliance in Management Only Mode.
- (Log Collector mode) Begin at Step 6 to Switch from Panorama mode to Log Collector mode.Enter the Public IP address of the Dedicated Log Collector when you Add the Log Collector as a managed collector to the Panorama management server. You cannot specify the IP Address, Netmask, or Gateway.
- (Panorama and Management Only mode) Configure a Managed Collector to add a Dedicated Log Collector to the Panorama virtual appliance. Management Only mode does not support local log collection, and requires a Dedicated Log Collector to store managed device logs.
Set Up the Panorama Virtual Appliance
Set Up the Panorama Virtual Appliance The Panorama virtual appliance enables you to use your existing VMware virtual infrastructure to centrally manage and monitor Palo ...
Install Panorama on Azure
How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector on Microsoft Azure. ...
Install the Panorama Virtual Appliance
Install the Panorama Virtual Appliance Before installation, decide whether to run the virtual appliance in Panorama mode, Management Only mode, Log Collector mode, or Legacy ...
Install Panorama on AWS GovCloud
How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector in Amazon Web Services GovCloud. ...
Setup Prerequisites for the Panorama Virtual Appliance
Minimum system requirements and instance recommendations for Panorama on AWS. ...
Install Panorama on AWS
How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector on Amazon Web Services. ...
Install Panorama on Google Cloud Platform
How to deploy a Panorama™ virtual appliance and a virtual Dedicated Log Collector on Google Cloud Platform (GCP). ...
Add a Virtual Disk to Panorama on Hyper-V
Add a virtual logging disk to Panorama™ in Panorama or Log Collector mode on Hyper-V. ...
Panorama Virtual Appliance and Virtual Dedicated Log Collector on Google Cloud Platform
How to deploy a Panorama™ virtual appliance and virtual Dedicated Log Collector on Google® Cloud Platform (GCP™). ...