We are currently running a Panorama virtual appliance in PANORAMA mode running on the ESXi host. Based on the predictable logs per second (LPS) estimation, we have allocated 16 CPUs and 32GB memory while the virtual appliance initially built up. At the moment, we only have one managed firewall connecting to Panorama and sending logs to the Panorama log collector, we noticed that the Panorama CPU utilisation baseline is around 1-2%. Advised by Palo Alto (reference) that "If the minimum resource requirements are not met for PANORAMA mode when you Install the Panorama Virtual Appliance, Panorama defaults to Management Only mode", I would like to know that after we have successfully install the appliance running on PANORAMA mode, can we then reduce the CPU below the resource requirements and keep it running on PANORAMA mode? That will be great if we can dynamically resize the resource of the PANORAMA appliance and keep it with the PANORAMA mode, as currently the oversubscribing CPU from the ESXi host will cause the waiting time of other VMs, while the Panorama virtual appliance doesn't need that many CPU resource with the current usage. Would you please advise? Thanks reference: https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/setup-prerequisites-for-the-panorama-virtual-appliance.html#id4430de3f-a44c-4b24-b9c3-52cef1f0bc96
... View more