When you need to change the default master key used to encrypt sensitive elements in the configuration, you can now deploy a master key to firewalls, Log Collectors, and WildFire appliances from Panorama. In a large-scale deployment, managing the master key centrally from Panorama ensures a uniform master key deployment and provides visibility into the status of the operation.

Scale up all your Panorama capabilities to manage up to 5,000 firewalls, using M-600 appliances or similarly resourced Panorama virtual appliances. This enhancement allows you to leverage all the benefits of centralization while utilizing the logging, reporting, device health monitoring, device deployment, and configuration management capabilities of Panorama for a larger number of firewalls. For example, if you are managing 3,500 firewalls using four Panorama appliances, you can now consolidate to a single Panorama appliance for managing your firewalls to ease the operational burden and reduce your management footprint.

In order to troubleshoot configuration errors, you can now perform operations such as export, revert, save, import, and load at a device group and template level. For example, this granularity allows you to independently revert or load the configuration of the firewalls within your access domain without impacting changes other administrators have made.