Panorama Overview
| Where Can I Use This? | What Do I Need? |
- NGFW (Managed by Panorama)
|
No prerequisites needed
|
The Panorama® management server provides centralized monitoring and administration for
multiple next-generation firewalls, WildFire® appliances, and appliance clusters.
Managing a distributed network of firewalls individually can be complex, time-consuming,
and lacks a unified view of network activity. Panorama solves these challenges by
offering a single location to oversee all applications, users, and content traversing
your network, significantly increasing operational efficiency and enabling you to
enforce consistent application enablement policies.To meet diverse network needs, it is
available in multiple models, including the virtual appliance and various M-Series
hardware appliances. To simplify large-scale deployments, the server offers powerful
features for centralized configuration and deployment. You can use templates and
template stacks to configure common base network and device settings, while device
groups allow for the centralized administration of globally shared and local policy
rules.Panorama also streamlines routine maintenance by allowing you to centrally deploy
licenses, PAN-OS® software, and dynamic content updates across all managed devices from
one location. To safely delegate responsibilities, Role-Based Access Control (RBAC)
enables distributed administration by defining granular privileges to restrict or grant
access to specific firewalls and configuration areas.For comprehensive visibility, it
aggregates logs from all managed firewalls, providing an essential audit trail of
network activity and configuration changes. Using integrated tools like the Application
Command Center (ACC), log viewers, and robust reporting capabilities, you can centrally
analyze traffic patterns, investigate security incidents, and identify potential threats
across the entire network. Additionally, the management server optimizes large networks
through data redistribution, which seamlessly shares essential User-ID™ data and
authentication timestamps with managed firewalls to ensure consistent policy enforcement
and maximize device capacity.