Can additional disk space be added to increase the root disk of VM firewall in AWS?

Can additional disk space be added to increase the root disk of VM firewall in AWS?

6031
Created On 11/06/24 23:05 PM - Last Modified 01/13/25 08:54 AM


Question


Can additional disk space be added to increase the root disk of VM firewall in AWS? If not how can the root disk be increased. 



Environment


  • Any PAN-OS version below 11.1.x
  • PA-VM-FLEX on AWS


Answer


  • Adding additional disk-space on a VM firewall in AWS would increase the logging disk but not the root disk or system disk. 
  • To increase the root disk one can upgrade the VM firewall to a higher instance size or model in AWS to increase the overall disk space and the root size
  • Or re-deploy the VM on PAN-OS 11.1.x to get higher root disk space
  • Disk space with VM running on PAN-OS 11.1.2-h3
    admin@PA-VM> show system disk-space 
    Filesystem Size Used Avail Use% Mounted on
    /dev/root 12G 5.2G 6.2G 46% /
    none 7.7G 72K 7.7G 1% /dev
    /dev/nvme0n1p5 16G 1.4G 14G 10% /opt/pancfg
    /dev/nvme0n1p6 7.9G 2.0G 5.6G 26% /opt/panrepo
    tmpfs 12G 6.8G 4.6G 60% /dev/shm
    cgroup_root 7.7G 0 7.7G 0% /cgroup
    /dev/nvme0n1p8 11G 38M 11G 1% /opt/panlogs
    tmpfs 12M 0 12M 0% /opt/pancfg/mgmt/lcaas/ssl/private
  • Upgrading the PAN-OS to 11.1.x will have no change
  • Output of disk-space with PAN-OS upgraded to 11.1.2-h3 from 10.2.9-hx
    admin@PA-VM> show system disk-space 
    Filesystem Size Used Avail Use% Mounted on
    /dev/root 6.9G 5.1G 1.5G 78% /
    none 7.7G 72K 7.7G 1% /dev
    /dev/nvme0n1p5 16G 5.0G 11G 33% /opt/pancfg
    /dev/nvme0n1p6 7.9G 3.9G 3.7G 52% /opt/panrepo
    tmpfs 12G 6.7G 4.7G 59% /dev/shm
    cgroup_root 7.7G 0 7.7G 0% /cgroup
    /dev/nvme0n1p8 21G 119M 20G 1% /opt/panlogs


Additional Information


https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server/install-a-vm-series-firewall-on-vmware-vsphere-hypervisor-esxi/add-additional-disk-space-to-the-vm-series-firewall



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000PQphCAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail