Migration Panorama from ESXi to Nutanix AHV

[Mamoudou]

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors.
We are currently using Panorama in VM mode.

1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hypervisor (or Redhat KVM)?

2. If yes, does Panorama support migration from VMWare to Nutanix AHV with Nutanix Move?

3. If only the OVA format is available and offered by Panorama, does Panorama include VirtIO drivers?

I found some documents about Palo alto and Nutanix there is missmatch between them.

Do you know something about that ?

Thanks

[Mamoudou]

Is anyone can help me with this question please ?

[jwegwerth]

I have the same question.  Is Panorama able to migrate or move to AHV Nutanix?  Do we have to do a new install of Panorama in Nutanix?

[Fariq_Zaidi]

i also have a same question 

Can the Palo Alto Panorama VM be installed on Nutanix AHV?

Can it migrate directly from ESXI to AHV or new setup on AHV is required?

do you got any answer for it?

[AntonioCazarez]

I have the same situation, and I only found this documentation. So, I am creating my own Cut Sheet based on that.

Migrate a Panorama Virtual Appliance to a Different Hypervisor

https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin/set-up-panorama/transition-to-a-diffe...

Recover Managed Device Connectivity to Panorama

https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin/troubleshooting/recover-managed-devic...

Install Panorama on KVM

https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin/set-up-panorama/set-up-the-panorama-v...

VM-Series in High Availability

https://docs.paloaltonetworks.com/vm-series/10-2/vm-series-deployment/about-the-vm-series-firewall/v...

[Tom.Fenner]

@AntonioCazarez How did your migration of Panorama to Nutanix AHV go?

@Everyone....
All of the linked documentation I find referencing Panorama does not contain instructions for Nutanix AHV. Both the Palo Alto and Nutanix compatibility matrix pages show support for Panorama running in the Nutanix AHV hypervisor. I opened a ticket for support and was linked to the same incomplete/outdated documentation. I'm waiting on their repsonse to my request for them to send updated docs. 

Nutanix Support & Insights (Nutanix shows compatible)
Panorama Hypervisor Support (Palo Alto shows compatible)
Setup Prerequisites for the Panorama Virtual Appliance (doesn't mention Nutanix)
Private Cloud | Palo Alto Networks > leads to this link > https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/partners/vm-series-firewall-on-nuta... 
That PDF specifically states Panorama is not supported on Nutanix AHV but it is obviously old.

[AntonioCazarez]

@Tom.Fenner It went great. I would like to share my documentation with you please send me an email to [email protected]

[BrianSnow]

Would you be willing to share on the thread here?  I'm in the same situation and the documentation seems to be lacking in regard to installing Panorama in Nutanix, which I am being asked to provide to our server team (I don't get access to do it myself).

Thank you

[AdamGoepel-Stillman]

Commenting to bump this as we are looking to do this too. 

[BigPalo]

Hi, im in the same situation. I need to migrate VMware Panorama to NUTANIX AHV. I have checked that this panorama migration can be done to Nutanix. Bring up the VM and then import device state. But i have a doubt about license. How can i move the license from VMware to nutanix for panorama? what are the steps?

[BrianSnow]

We migrated last year with the help of managed services and by opening proactive cases with TAC.  Basically it was a backup and restore job, but I don't recall how we handled the license because we didn't have any issues -- I would recommend opening a TAC case to get clarity on that.  Our instance was an all-in-one (Panorama and collector) and we ran into disk sizing issues where we couldn't use a 4TB disk size and had to break up into smaller disks.  Unfortunately, my memory is a bit foggy on that as well but it may have been related to the PAN-OS version at the time. 
Probably my biggest disappointment was that after the migration was completed, all of the "created" dates for our policies, etc. in Panorama were changed to the date that we completed the migration to Nutanix.  Maybe that's something we did wrong but just thought it was worth mentioning.  But overall once the migration was completed it's been solid and no complaints.

[JosephBedard]

I moved from ESX to AHV some months back. A Nutanix Move job was not on the table due to licensing being hostID based.  A migration involved rolling a new appliance using the KVM image on AHV, Exporting and importing the configuration from the ESX Pano over to the AHV Pano, then reconnecting all of my dozens of NGFW devices. A ticket with TAC to assist in moving the license to complete the migration.