For centralized reporting and cohesive policy management across all the firewalls on your network, you can deploy the Panorama™ management server as a virtual appliance or as a dedicated M-Series hardware appliance. These appliances can operate in distinct modes like Panorama mode or Management Only mode.

To begin, you must evaluate essential planning phases, determine log storage requirements based on daily logging rates, and optimally structure large-scale firewall deployments by configuring an active and passive High Availability (HA) pair for fault tolerance.

Next, you can follow comprehensive instructions to install and initially configure Panorama across various cloud and hypervisor environments, including AWS, Azure, and ESXi, or as dedicated hardware.

After the core system is initialized with a management IP address, you must register the deployment and install the necessary management and support licenses. These licenses enable you to oversee managed firewalls and retrieve PAN-OS software and dynamic content updates.

Finally, to ensure security and communication integrity, you can install device certificates on both the Panorama server and any dedicated log collectors.

You can also deploy custom certificates to establish mutual authentication between HA peers and configure Role-Based Access Control (RBAC) to securely govern administrative access to the web interface, CLI, and XML API.