3 WAYS TO
MAXIMIZE YOUR
PANORAMA
DEPLOYMENT!
Increase Speed – Enhance Logging – Improve Availability
You chose Panorama™ to enhance management
­functionality, ­improve visibility across your deployment
of next-generation ­firewalls, and streamline your rule
base. But you could take ­advantage of some additional
benefits by slightly changing the way you have deployed
the product. Let’s explore how you can get the most out
of your Panorama deployment.
Top Three Ways to Deploy
­Panorama
1.Move from VM to a Hardware
Platform
2.Add Dedicated Log Collectors
3.Deploy Panorama in High
­Availability (HA)
Palo Alto Networks | Solution Brief
1. Move from VM to a Hardware Platform
Deploying Panorama on a VM is a great option for those who want fewer
­appliances in their security deployments, but it can come with drawbacks.
You have to ask a VM management team to add processing power when
VM ­resources are oversubscribed. Deploying a hardware appliance (either
an M-100 or M-500 appliance) in your network ensures available resources
when you need them. Free yourself from dependence on third-party
hardware vendors.
2. Add Dedicated Log Collectors
Combining management and log collection into one piece of hardware may
work in some instances, especially for small networks; but, as soon as your
log retention increases, you are sacrificing valuable management resources
for logging.
1
MANAGER
VM M-100 M500
LOG COLLECTOR
LOG COLLECTOR
VM M-100 M500
VM M-100 M500
LOG COLLECTOR
VM M-100 M500
Figure 1: Panorama deployment architecture
Adding dedicated log collectors (additional M-100 or M-500
appliances) to your Panorama deployment will increase log
ingestion rates, lengthen log retention, and free up valuable resources. Adding log collectors strategically across your distributed deployment will also cut back on the need to backhaul all logs
over WAN links and provide better access to configuration-wide
data for analysis.
3. Deploy Panorama in High Availability (HA)
It’s no secret: HA decreases the chance of downtime for
­hardware. Panorama can be deployed in HA, effectively
­increasing availability and eliminating single points of failure.
Improve availability by deploying Panorama in HA.
4401 Great America Parkway
Santa Clara, CA 95054
Main:+1.408.753.4000
Sales:+1.866.320.4788
Support:+1.866.898.9087
www.paloaltonetworks.com
Conclusion
Panorama provides streamlined management, great visibility,
and excellent rule management across distributed networks of
next-generation firewalls. It is, however, equally important to
plan a Panorama deployment strategically to optimize processing
speed, logging capacity/retention, as well as availability of your
distributed security network. Thanks to the flexible deployment
options of Panorama, you can ensure you maximize the performance of your network security management solution by adding
dedicated management appliances and log collectors or deploy
Panorama in HA pairs.
© 2016 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of
Palo Alto Networks. A list of our trademarks can be found at http://www.paloaltonetworks.com/company/trademarks.html. All other marks mentioned herein may be
trademarks of their respective companies. pan-sb-panorama-deployment-030816