: Install the SD-WAN Plugin When Panorama is not Internet-Connected
Focus
Focus

Install the SD-WAN Plugin When Panorama is not Internet-Connected

Table of Contents

Install the SD-WAN Plugin When Panorama is not Internet-Connected

Download the SD-WAN plugin in the Panorama™ management server from the Palo Alto Networks Customer Support Portal.
A Panorama™ management server with an SD-WAN plugin is required to configure and manage an SD-WAN deployment. When Panorama is not connected to the internet, you must download the SD-WAN plugin from the Palo Alto Networks Customer Support Portal and upload the plugin to Panorama. The plugin needs to be installed only on the Panorama managing your SD-WAN firewalls, and not on the individual hub and branch firewalls.
  1. Log in to the Palo Alto Networks Customer Support Portal.
  2. Select UpdatesSoftware Updates, and in the Filter By drop-down select Panorama Integration Plug In.
  3. Locate and download the SD-WAN Plug-in.
  4. Log in to the Panorama Web Interface.
  5. Select PanoramaPlugins and Upload the SD-WAN plugin.
  6. Browse and locate the SD-WAN plugin you downloaded from the Customer Support Portal and click OK.
  7. Install the SD-WAN plugin.
  8. After you successfully install the SD-WAN plugin, select Commit and Commit to Panorama.
    This step is required before you can commit any configuration changes to Panorama.
  9. (Management Only mode only) Enable the logging disks required to store SD-WAN monitoring data.
    • M-Series Appliances—All M-Series appliances come with two pairs of 8TB logging disks in RAID 1 by default. When managing firewalls leveraging SD-WAN from Panorama in Management Only mode, you must enable the first pair of logging disk pairs to store SD-WAN monitoring data.
    1. Log in to the Panorama CLI.
    2. Enable the first pair of logging disk pairs included by default with your M-Series appliance.
      > request system raid add A1
    3. Verify that logging Logging Disk Pair A is Available:
      > show system raid detail 
      When the RAID set up is complete, the following response displays:
      Disk Pair A       Available 
         Status         clean 
         Disk id A1     Present 
             model        : ST91000640NS 
             size         : 953869 MB 
             status       : active sync 
    4. Make the logging disk pairs available for logging.
      1. Select PanoramaManaged Collectors and edit the Log Collector.
      2. Select Disks and Add each array.
      3. Click OK to save your changes.
      4. Select CommitCommit to Panorama and Commit your changes.
      5. Select CommitPush to Devices, select the Collector Group, and Push your changes.
    • Panorama Virtual Appliances—If you deployed your Panorama virtual appliance in Management Only mode, you must increase the system disk to 224GB to store SD-WAN monitoring data.
  10. Continue to Set Up Panorama and Firewalls for SD-WAN to begin configuring your SD-WAN deployment.