Panorama VM - 8.0.x - How long can we run in Legacy Mode?

[dfeddersen]

We currently have a Panorama virtual machine with 2TB of storage runnint 7.1.x.  I know there are changes to the log database in 8.0.x.  We also have some newer PA firewalls that only run 8.0.x, so we would like to upgrade Panorama.  How long can we run in "legacy" mode with Panorama 8.0.x?  I don't have 2+TB of additional storage at the moment to create a new disk to complete the log conversion.

Are there any limitations on running Panorama 8.0.x in "legacy" mode?  Can we run in that mode for a few weeks?  Can we still view the logs and run any needed reports?  Will logs still be stored in the legacy storage?

Thank you in advance.

[BPry]

You're going to lose the local log collector, I'm not positive but I think if you change into legacy mode youll likely lose the existing logs and any query/reporting on these logs is going to take longer. 

[Remo]

As I understood you can run in legacy mode as long as you want (or until PaloAlto requires Panorama-Mode for feature updates)
In legacy mode everything works as you already know it. You simply don't have the benefits of panorama-mode (higher performance, storage capacity up to 24 TB on a single appliance, snmp support for the local log collector, ...)

[dfeddersen]

ok, thank you.  I couldn't find anythign definitive on if we could stay in legacy mode for a while and still have everything work with logging and reporting.

Reading through some other posts, someone said "Because PAN-OS 8.0 uses a new format, the logs will need to be converted to the new format to work properly and run reports.", and thats when I got concerned.

https://live.paloaltonetworks.com/t5/General-Topics/Upgrading-7-1-to-8-0-New-Log-Storage/m-p/154369#...

[Remo]

If you wan't to use panorama-mode, yes then the logs need to be converted. But you don't have to use panorama-mode.