Requirements for M-600 to have 5000 managed devices
14438
Created On 02/27/19 04:37 AM - Last Modified 02/05/25 01:22 AM
Symptom
With the new enhancement in PAN-OS 9.0, specific Panorama platforms can manage up to 5,000 devices. This article is specifically for the M-600 platform.
Environment
- M-600 (Panorama)
- PAN-OS 9.0
Cause
Without meeting the proper requirements, the following error can be seen:
admin@Panorama> configure Entering configuration mode [edit] admin@Panorama# set mgt-config devices 00500000123 Server error : 00500000123 is invalid. Maximum number of managed devices reachedNote: This error can also be seen if the proper Device Management license has not been applied.
Resolution
Steps to settings up the M-600 appliance to manage up to 5,000 firewalls can be found here.
Chart from the Panorama Administrator's Guide, section Increased Device Management Capacity Requirements
Requirement | M-Series Appliance |
Model | M-600 |
Panorama Mode | Management Only |
System Disk | 240 GB SSD |
Cores | 28 (hyperthreaded) |
Memory | 256 GB |
Log Collection | Local log collection is not supported. See Deploy Panorama with Dedicated Log Collectors to set up log collection. |
Logging and Reporting | Enable the Use Panorama Data for Pre-Defined Reports settings (Panorama > Setup > Management > Logging and Reporting Settings > Log Export and Reporting) |
Key requirements to check:
- The model, software version, and system-mode, and licensed-device-capacity are verified by the following command:
admin@Lab80-154-M-600> show system info hostname: Lab80-154-M-600 ... model: M-600 serial: 017507000555 cloud-mode: non-cloud sw-version: 9.0.0 app-version: 8127-5316 app-release-date: 2019/02/23 08:26:17 PST av-version: 2900-3410 av-release-date: 2019/02/25 04:00:18 PST wf-private-version: 0 wf-private-release-date: unknown url-db: paloaltonetworks wildfire-version: 0 wildfire-release-date: logdb-version: 9.0.10 platform-family: m system-mode: management-only operational-mode: normal licensed-device-capacity: 5000
- The Device Management License is installed and specified up to 1000 devices
admin@Lab80-154-M-600> request license info ... License entry: Feature: Device Management License Description: Device management license to manage up to 1000 devices Serial: 017507000555 Issued: November 16, 2018 Expires: Never Expired?: no
PANW sales representative will be able to assist in obtaining the correct Panorama device management license
License SKU: PAN-M-600-P-1K
License SKU: PAN-M-600-P-1K
Note: Although the description states 1,000 devices can be managed, the M-600 can still manage up to 5,000 devices.
This is as of 9.0.0 base release.
This is as of 9.0.0 base release.
Additional Information
Additional documentation: