Panorama Overview

EDU-220

Panorama 8.1

Courseware Version B
Agenda
 Panorama solution

 Deployment design overview

 Panorama platforms

2 | © 2018 Palo Alto Networks, Inc.

Panorama Solution

3 | © 2018 Palo Alto Networks, Inc.

What Is Panorama?
Software/Content/License Updates Local Policy and Config

Local Firewall
Administrator
Templates Report
Device Groups Data

Enterprise
Administrators
Templates User-ID
Device Groups
Logs Data

Device Administration

4 | © 2018 Palo Alto Networks, Inc.

Deployment Design Overview

5 | © 2018 Palo Alto Networks, Inc.

Flexible Deployment Options

Basic Deployment Distributed Deployment

Panorama Panorama

Log Collector Log Collector Log Collector

Firewall Firewall
Firewalls Firewalls Firewalls

6 | © 2018 Palo Alto Networks, Inc.

Distributed Log Collection Deployment
Panorama  Firewalls send their logs to Log Collectors
Management Appliance
 Separates management and logging
 Log Collectors are scalable.
 Panorama management appliance queries Log Collectors.
Log Query Reporting
Policy
Reports  Configurations are pushed to firewalls from Panorama.

Management

Log Collector Query Log Collector Logging Service

Firewalls Firewalls Firewalls

7 | © 2018 Palo Alto Networks, Inc.

High Availability (HA) Overview
 Panorama appliances in HA provide
redundancy in an active/passive role.

 Panorama HA peers communicate over Config Templates

the management port. Device Group Policy

REPOR
T

Primary Active

Panorama Management
Appliances in High Availability
Secondary Passive Log Collector

Config Templates

Device Group Policy

8 | © 2018 Palo Alto Networks, Inc.

Panorama in the Cloud
 Panorama virtual appliance and Public Cloud
the virtual Dedicated Log Collector
are supported on public cloud
offerings. VM-Series firewall

 Panorama virtual appliance on

AWS manages firewalls inside
and outside the cloud. Panorama Virtual Dedicated
virtual appliance Log Collector

VM-Series firewall

On-Premise Firewall

9 | © 2018 Palo Alto Networks, Inc.

Panorama Platforms

10 | © 2018 Palo Alto Networks, Inc.

M-100 Panorama Appliance
Management Appliance Log Collector
Configuration Aggregated collection
Device management Query servicing
…or both components in a single system to scale distributed environments.

Specifications Notes
Processor Intel Xeon 4-core CPU
Memory/Internal Storage 32GB DDR3 RAM/120GB SSD storage
Storage Up to 8TB storage for logs; default storage is 2TB

11 | © 2018 Palo Alto Networks, Inc.

M-200 Panorama Appliance
Management Appliance Log Collector
Configuration Aggregated collection
Device management Query servicing
…or both components in a single system to scale distributed environments.

Specifications Notes
Processor Intel Xeon 8-core CPU
Memory/Internal Storage 128GB DDR4 RAM/240GB SSD storage
Storage Standard 16TB RAID storage for logs; this is the default

12 | © 2018 Palo Alto Networks, Inc.

M-500 Panorama Appliance
Management Appliance Log Collector
Configuration Aggregated collection
Device management Query servicing
…or both components in a single system to scale distributed environments.

Specifications Notes
Processor Intel Xeon 6-core CPU
Memory/Internal Storage 128GB DDR4 RAM/240GB SSD storage
Storage Up to 24TB storage for logs; default is 4TB

13 | © 2018 Palo Alto Networks, Inc.

M-600 Panorama Appliance
Management Appliance Log Collector
Configuration Aggregated collection
Device management Query servicing
…or both components in a single system to scale distributed environments.

Specifications Notes
Processor 2 Intel Xeon 14-core CPU
Memory/Internal Storage 256GB DDR4 RAM/240GB SSD storage
Storage Up to 48TB storage for logs; default is 16TB

14 | © 2018 Palo Alto Networks, Inc.

Panorama Virtual Machine
 Panorama on ESXi refers to a Panorama virtual appliance
running on VMware ESXi.
 Panorama on AWS refers to a Panorama virtual appliance
Panorama
running on Amazon Web Services (AWS). virtual
appliance
 Panorama on Azure refers to a Panorama virtual appliance
running on Microsoft Azure.
 Panorama virtual appliance offers the same functionality
as Panorama on the M-Series.

15 | © 2018 Palo Alto Networks, Inc.

Modes in Panorama
Panorama M-Series
(such as an M-500)

Panorama Log Management Only

Mode Collector Mode Mode

Panorama
virtual appliance Legacy Mode

Panorama Mode

Log Collector Mode

Management Only Mode

16 | © 2018 Palo Alto Networks, Inc.

Summary
Now that you have completed the module, you should be able to:
 Describe the Panorama solution
 Describe overview of the deployment design of Panorama
 Describe Panorama platforms

17 | © 2018 Palo Alto Networks, Inc.

Questions?

18 | © 2018 Palo Alto Networks, Inc.

Secures the Network
 This page was intentionally left blank.

20 | © 2018 Palo Alto Networks, Inc.