Understanding Panorama Log Ingenstion & Sizing

MarioMarquez — Fri, 06 Jul 2018 14:55:04 GMT

I am new to PA & I'm trying to understand the necessity of log collection to a Panorama VM. My company is about to deploy PA-3220's in HA pairs in several data centers. We have a single Panorama VM getting deployed for 6 firewalls (3 HA clusters). Coming from a traditional ASA background logging is set up either to go to syslog server or on the firewalls cache memory. I read the PA guide for sizing Panorama & the logging described on the guide indicates that the logs get used to build reports within Panorama to report on various statistics. The guide indicated that logs are essential to building reports within Panorama not just for traditional syslogging purposes. Is this true?

Re: Understanding Panorama Log Ingenstion & Sizing

BPry — Sat, 07 Jul 2018 00:54:43 GMT

@MarioMarquez,

Yes. So essentially when you forward the logs to Panorama you then are allowed to build custom reports with all of the information from all the firewalls that you have deployed. Without Panorama you would need to run any reports on each of the HA clusters and then either present those reports or manually merge them using the information presented.

This also gives you one easy GUI to see all the logs from your firewalls if you ever need to scan your enviroment for different activity.

topic Understanding Panorama Log Ingenstion & Sizing in General Topics

Understanding Panorama Log Ingenstion & Sizing

Re: Understanding Panorama Log Ingenstion & Sizing