The vCenter server is the centralized management tool for the vSphere suite.

VMware's Networking and Security platform must be installed and registered with the vCenter server. The NSX Manager is required to deploy the VM-Series firewall on the ESXi hosts within a ESXi cluster.

PAN-OS

The VM-Series base image (PA-VM-NSX-8.1.zip) is used for deploying the VM-Series firewall for NSX with PAN-OS 8.1.

The minimum system requirement for deploying the VM-Series firewall for NSX on the ESXi server depends on your VM-Series model. See VM-Series System Requirements for the minimum hardware requirements for your VM-Series model.

Panorama must be running the same release version or later version that the firewalls that it will manage.

Panorama is the centralized management tool for the Palo Alto Networks next-generation firewalls. In this solution, Panorama works with the NSX Manager to deploy, license, and centrally administer—configuration and policies—on the VM-Series firewall for NSX.

Panorama must be able to connect to the NSX Manager, the vCenter server, the VM-Series firewalls and the Palo Alto Networks update server.

The resources required by Panorama depend on the mode Panorama will run in: Legacy or Panorama (

recommended

). New Panorama installations run in Panorama mode. Panorama installations running in Legacy mode prior to upgrade remain in Legacy mode after upgrading to 8.1. For more information about the modes and the requirements associated with each mode, see Set Up the Panorama Virtual Appliance.

In Panorama Mode, set the memory, number of CPUs, and storage based on the log storage capacity of Panorama:

In Legacy Mode, set the memory and the number of cores based on the number of firewalls that Panorama will manage:

vCenter/ESXi