: Increased Device Management Capacity Requirements
Focus
Focus

Increased Device Management Capacity Requirements

Table of Contents

Increased Device Management Capacity Requirements

System requirements for managing up to 5,000 firewalls using an M-600, M-700 appliance, and Panorama™ virtual appliance.
You can manage up to 5,000 firewalls using a single M-600, M-700 appliance, or Panorama™ virtual appliance installed on VMware ESXi, or up to 2,500 firewalls with all other supported Panorama virtual appliances. For managing such large deployments from a single Panorama management server alleviates the operational complexity of configuration management and reduces the security and compliance risk of managing multiple Panorama management servers.
For log collection, a single Panorama management server is ideal because it provides a centralized location to view and analyze log data from managed devices rather than requiring you to access each individual Panorama management server. To provide redundancy in the event of system or network failure, Palo Alto Networks recommends deploying two Panorama management servers in a high availability (HA) configuration. For Panorama system and config logs, an additional disk with a minimum 92GB capacity is required. This additional disk is automatically detected by the Panorama virtual appliance when Panorama is rebooted and mounted as a partition for system and config log storage.
For generating pre-defined reports, you must enable Panorama to use Panorama data for pre-defined reports. This generates pre-defined reports using log data already collected by Panorama or the Dedicated Log Collector, which reduces the resource utilization when generating reports. Enabling this setting is required, otherwise Panorama performance may be impacted, and Panorama may become unresponsive.
The Panorama management server must meet the following minimum requirements to support increased device management capacity:
Requirement
5,000 Firewalls
2,500 Firewalls
Model
M-600
M-700
(10.2.5 and later) VMware ESXi
All supported Panorama hypervisors. For more information, see Panorama Models.
Panorama Mode
Management Only
Management Only
System Disk
Used to store the operating system files, system logs, software updates, and content updates.
  • 81GB—Used to store the operating system files and system logs.
  • Additional disk with a minimum 92GB capacity used for storing Panorama system and config logs.
CPUs
56
32
Memory
256GB
256GB
Log Collection
Local log collection is not supported.
See Deploy Panorama with Dedicated Log Collectors to set up log collection.
Logging and Reporting
Enable the Use Panorama Data for Pre-Defined Reports setting (PanoramaSetupManagementLogging and Reporting SettingsLog Export and Reporting)