Panorama VM is misaligned.

Showing results for 
Search instead for 
Did you mean: 

Panorama VM is misaligned.

Not applicable

Hi everyone,

I have installed the Panorama from the OVF file that Palo Alto provide. But when the VM is deployed, it is misaligned. Did anyone solve this issue already?I have tried to align it with MBRAlign in ESX, but after that the alignment the VM will not startup anymore.

Does anyone have any idea how to solve this?


This is the reply from the engineer where i am in contact with regarding the misalignment.

Account: G-Star Raw C.V.

Comment: [Recipients: Patrick Lim]

Hi Patrick,

Just wanted to let you know that this has been fixed in a new base-image.

I'm currently waiting for a confirmation of when that will become available for public download.

I asked engr to take a look at the effort of an alignment change based on this thread and a couple other requests. This does not guarantee when or if a new base image will be released since it requires QA testing and verification.

I think there may have been a misunderstanding about this between Engr and Support based on some comments in an enhancement bug. I'll speak with support to make sure this is being communicated correctly.

Please contact and rely on your SE regarding forward looking statements. They will be able to put you in touch with a PM who, under NDA, can make forward looking statements. 

I can understand that cool features might be under NDA until publically announced... but I fail to see why aligned vmware-image would fall into the NDA traphole?

Anything forward looking which is a feature and not a bug would require NDA. We want to set expectations appropriately since any forward looking info can affect new or existing customer actions/decisions.

Changing the alignment is not a bug.

If you want to set expectations appropriately, please note in Panorama documentation that it doesn't properly support NetApp SAN storage.  While changing the alignment certainly isn't a bug, it ought to be a feature.  Misaligned storage doesn't make my server guys happy and it means we had to stand up an NFS infrastructure just for Panorama.  We're able to adjust the alignment of many other network/security VM appliances, why not Panorama?

Our related feature request is under FR ID: 2686.

Perhaps you should buy the M100 box and then dont have to think about if its aligned or not ;-)

On the other hand hopefully the QA testings will be worth waiting for (given the history for previous oopsies regarding QA and PaloAlto).

L3 Networker

Here is how we aligned our panorama vm.

  1. Deploy the OVF as per instructions found in Chapter 12 of the Palo Alto Networks Administrator's Guide Release 5.0.
  2. Upgrade the Virtual Hardware. (Only if needed in your environment)
  3. Change SCSI Controller Type to VMware Paravirtual.
  4. Align VM partitions using mbralign.
  5. Delete the backup files created by mbralign.
  6. Boot into linux rescue CD. (I used CentOS)
  7. Copy grub from rescue cd into file system
  8. Fix the GRUB as per belo steps
    1. Type the command chroot /mnt/sysimage
    2. Type the command grub. At the grub prompt enter the following three commands:
      root (hd0,0)
      setup (hd0)
  9. Exit and Power off the VM.
  10. Change SCSI Controller Type back to BusLogic Parallel.
  11. Start the VM.
  12. Login using admin/admin.
  13. Update the IP address of the VM
    configureset deviceconfig system ip-address <ip address> netmask <netmast> default-gateway <gateway ip address>.commitexit
  14. Configure the rest via the Web UI.

Will this workaround survive a Panorama update?

Palo Alto engineer, is this workaround supported?

While I haven't performed an update, I don't see how it will not survive one. Once you're VM is aligned, on and working, you can do whatever you want in there.


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!