Product Description
Overview:
Panorama is a centralized management system that provides global visibility and control over multiple Palo Alto next generation firewalls through an easy to use web-based interface. Panorama enables administrators to view aggregate or device-specific application, user, and content data and manage multiple Palo Alto firewalls—all from a central location.
Large enterprises commonly have many firewalls deployed throughout their organization and more often than not, the process of managing and controlling them is cumbersome due to management complexities and inconsistencies between individual device and centralized management interfaces. The result is an increase in administrative efforts and associated costs.
Panorama provides centralized management and visibility of Palo Alto next-generation firewalls. From a central location, administrators can gain insight into applications, users and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Administrators can centrally perform analysis, reporting and forensics with the aggregated data over time, or on data stored on the local firewall.
Panorama shares the exact same web-based look and feel as the individual hardware and virtual form-factor firewalls, minimizing any learning curve or delay in executing the task at hand. Palo Alto adheres to a management philosophy that emphasizes consistency, providing a significant advantage over competitive offerings.
Panorama provides centralized policy and device management over a network of Palo Alto™ next-generation firewalls.
- View a graphical summary of the applications on the network, the respective users, and the potential security impact.
- Deploy corporate policies centrally to be used in conjunction with local policies for maximum flexibility.
- Delegate appropriate levels of administrative control at the device level or globally with role-based management.
- Centrally analyze, investigate and report on network traffic, security incidents and administrative modifications.
Key Features:
- Application Command Center (ACC): Provides a visual summary of application, web, threat and data transfer activity displayed in a straightforward, easy to understand manner. Administrators can quickly learn more about the network activity by adding and removing filters in ACC with a click of the mouse.
- App-Scope: Provides a comparative view of application activity (present vs. a past timeframe) across either multiple devices or a single device to help administrators pinpoint problematic network behavior.
- Policy-based application usage control: Using a policy editor with a familiar look and feel, administrators can develop, deploy and manage application usage control polices using a wide range of criteria such as: user and group, application, application category, application behavior or underlying technology.
- Shared policies: Deploy a set of global policies across a set of distributed firewalls. Local device administrators will be able to see these rules, but only a Panorama administrator can modify or remove them.
- Centralized Update Management: Customers can use Panorama to manage licenses and perform device or content updates (viruses patterns, threat signatures, App-ID).
- Application browser: Allows administrators to quickly research an application, its behavioral characteristics and underlying technology and then immediately translate the results into a security policy.
- Logging: Detailed logs are collected locally, leveraging device storage and eliminating the requirement for centralized logging. Logs can be dynamically filtered on individual fields as well as through regular expressions.
- Reporting: More than 30 predefined reports can be used as is or modified and saved for future use. Reports can be exported to PDF and scheduled for email delivery.
Technical Specifications:
Panorama Specifications | |
---|---|
Number of Devices Supported | Up to 1,000 |
Administrator Authentication | Local database, RADIUS |
High Availability | Active/Passive |
Log Storage | Maximum of 2 Terabytes (TB) |
Command Line Interface | SSHv2, Telnet or Console |
Web Interface | HTTPS, HTTP |
Device Connection | SSLv2 |
Management Tools and APIS |
|
Virtual Appliance Specifications | |
Minimum Server Hardware Requirements |
|
VMware Support | VMware ESX 4.1 or greater |
Browser Support |
|
Log Storage |
|