Deploy a WildFire Cluster

To deploy a WildFire appliance cluster you must upgrade all of the appliances that will be enrolled into the cluster, create the WildFire cluster, and then finally configure the settings to best suit your needs. You can perform these tasks locally from the WildFire appliance CLI or through Panorama, which enables you to quickly apply configuration changes and upgrades to connected WildFire appliances.

The following procedure shows how to create and configure a WildFire HA (high availability) pair and to add additional appliance nodes to a cluster.

Upgrade your WildFire appliances locally to PAN-OS 8.0.1 or later, the minimum supported release to operate clusters.

Create, configure, and add nodes to a WildFire appliance cluster.

Configure a Cluster and Add Nodes Locally

Configure a Cluster and Add Nodes on Panorama

Configure general WildFire appliance cluster settings.

Configure General Cluster Settings Locally

Configure General Cluster Settings on Panorama

(Optional) Encrypt WildFire cluster appliance-to-appliance communications.

Configure Appliance-to-Appliance Encryption Using Predefined Certificates Through the CLI

Configure Appliance-to-Appliance Encryption Using Custom Certificates Through the CLI

Configure Appliance-to-Appliance Encryption UsingPredefined Certificates Centrally on Panorama