: Increased Device Management Capacity Requirements
Focus
Focus

Increased Device Management Capacity Requirements

Table of Contents

Increased Device Management Capacity Requirements

System requirements for managing up to 5,000 firewalls using an M-600 appliance or up to 2,500 firewalls using a Panorama™ virtual appliance.
You can manage up to 5,000 firewalls using a single M-600 appliance in Management Only mode or manage up to 2,500 firewalls using a single Panorama virtual appliance in Management Only mode. Managing such large deployments from a single Panorama management server alleviates the operational complexity of configuration management and reduces the security and compliance risk of managing multiple Panorama management servers.
For log collection, a single Panorama management server is ideal because it provides a centralized location to view and analyze log data from managed devices rather than requiring you to access each individual Panorama management server. To provide redundancy in the event of system or network failure, Palo Alto Networks recommends deploying two Panorama management servers in a high availability (HA) configuration. For Panorama system and config logs, an additional disk with a minimum 92GB capacity is required. This additional disk is automatically detected by the Panorama virtual appliance when Panorama is rebooted and mounted as a partition for system and config log storage.
For generating pre-defined reports, you must enable Panorama to use Panorama data for pre-defined reports. This generates pre-defined reports using log data already collected by Panorama or the Dedicated Log Collector, which reduces the resource utilization when generating reports. Enabling this setting is required, otherwise Panorama performance may be impacted, and Panorama may become unresponsive.
To manage up to 5,000 firewalls, the Panorama management server must meet the following minimum requirements:
Requirement
M-Series Appliance
Panorama Virtual Appliance
Model
M-600
All supported Panorama hypervisors. For more information, see Panorama Models.
Panorama Mode
Management Only
Management Only
Number of managed firewalls
5,000
2,500
System Disk
240GB SSD—Used to store the operating system files and system logs.
  • 81GB—Used to store the operating system files and system logs.
  • Additional disk with a minimum 92GB capacity used for storing Panorama system and config logs.
CPUs
56
32
Memory
256GB
256GB
Log Collection
Local log collection is not supported.
See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Logging and Reporting
Enable the Use Panorama Data for Pre-Defined Reports setting (PanoramaSetupManagementLogging and Reporting SettingsLog Export and Reporting)