VM-Series
Deployment
Guide
43
The VM-Series NSX Edition Firewall
VM-Series NSX Edition Firewall Overview
vCenter Server
The vCenter server is required to manage the NSX Manager and the ESXi hosts in your datacenter. This joint
solution requires that the ESXi hosts be organized into one or more clusters on the vCenter server and must be
connected to a distributed virtual switch.
For information on clusters, distributed virtual switch, DRS, and the vCenter server, refer to your VMware
documentation:
http://www.vmware.com/support/vcenter-server.html.
Palo Alto
Networks
PAN-OS 6.0
The
VM-Series base image (PA-VM-NSX-6.0.0.zip) used for
deploying the VM-Series NSX edition firewall is PAN-OS version 6.0.
The minimum system requirement for deploying the VM-Series NSX
edition firewall on the ESXi server is as follows:
•
Two vCPUs. One will be used for the management plane and one
for the dataplane. You can have vCPUs for the dataplane in the
following increments: 2, 4, or 8 vCPUs.
•
5GB of memory. Any additional memory will be used by the
management plane only.
•
40GB of virtual disk space.
Panorama
6.0
Panorama is the centralized management tool for the Palo Alto
Networks next-generation firewalls. In this solution, Panorama works
with the NSX Manager to deploy, license, and centrally administer—
configuration and policies—on the VM-Series NSX edition firewall.
Panorama must be able to connect to the NSX Manager, the vCenter
server, the VM-Series firewalls and the Palo Alto Networks update
server.
The minimum system requirement for Panorama is as follows:
•
Two 8-Core vCPUs (2.2GHz); use 3GHz if you have 10 or more
firewalls.
•
4GB RAM; 16GB recommended if have 10 or more firewalls.
•
40GB disk space; To expand log capacity, you must add a virtual
disk or set up access to an NFS datastore. For details, refer to the
Panorama Administrator’s Guide
.
VM-Series
NSX Edition
6.0
The only VM-Series license available in this solution is the VM-1000 in
hypervisor mode (VM-1000-HV).
Provider
Component
Minimum
Version
Description