yes it does. Having an logging enviroment with alot of quick sesions, will fill that up a lot quicker than an enviroemtn with not many sesions that move alot of data. for my enviroment 500gb is a bit over a month of data. 120gb was around a week, but we log every rule, and have multiple DMZ zones. If you are running in legacy mode, you can only have 1 dedicated log disk, and if you need to change it, you loose all logs and start over. if you are running in "panorama" mode you have more flexabiltiy to add or remove disks. https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama-overview/panorama-models I believe in a normal install, loging is part of the install disk, so you can easly add a dedicated disk easly without losing logs in any mode.
... View more