topic Re: Does Panorama M-100 support more than 100 devices? in General Topics

Does Panorama M-100 support more than 100 devices?

afiq — Mon, 28 Apr 2014 17:18:26 GMT

Looking to manage more than 100+ devices (around 300 device). is the M-100 able to meet this requirement?

below is my current planning setup:

M-100 (panorama mode) <--------------------------> 100+ PA box

or do i required another M-100 box as log collector in between?

M-100 (Panorama mode)<------------------------> M-100 (log Collector mode) <-----------------------> 100+ PA box

Appreciate any input..thanks

Re: Does Panorama M-100 support more than 100 devices?

jdelio — Tue, 29 Apr 2014 15:34:59 GMT

According to this Spec Sheet for the M-100 decive:

https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/datasheets/panorama/panorama.pdf

Panorama M-100 devices will support 1000 devices.

As far as when you will need an additional M-100 for a log collector inbetween the Firewall and Panorama, I am going to recommend that you contact your local SE (sales engineer) so they can best advise what you what will fit best in your environment.

Re: Does Panorama M-100 support more than 100 devices?

pulukas — Tue, 29 Apr 2014 19:46:26 GMT

Manage more than 100 is not a problem. The issue will be if you are collecting and using logs how much logging per second you are getting and at what point additional log collectors will be needed to avoid losing information.

The second issue is then how much disk space you need to save historical logs.

Re: Does Panorama M-100 support more than 100 devices?

afiq — Mon, 05 May 2014 04:02:33 GMT

im also worried about the historical logs. the best way i can think is to run a daily schedule log export but those file will be unreadable in PA/M-100 box later on.

Re: Does Panorama M-100 support more than 100 devices?

jdelio — Tue, 06 May 2014 12:31:24 GMT

When you have many devices and so many logs you are worried about getting all of the logs, then that is why we have designed the M-100's to be a Panorama Manager and then the M-100's can be dedicated log collectors. You can have many M-100 Log collectors all reporting to Panorama. Panorama manages the M-100's and the Firewalls.

So the Firewalls send their logs to the M-100's and then when you need to run reports, etc, Panorama goes to the M-100 units to read the logs.

I hope this makes sense.