topic Re: Panorama Project - Security Policies not showing for "all" or specific device-groups in Expedition Discussions

Panorama Project - Security Policies not showing for "all" or specific device-groups

aaronlevy — Wed, 03 Jul 2019 21:50:18 GMT

After importing Panorama into a Project the Dashboard show's the full number of security rules but when you go into the policies, select the Panorama xml config and try to vew "all" or for specific device-groups it displays "no data". Running v1.1.26, Although I was having this issue on v1.1.22 but left it alone while the web gui reload loop was being fixed.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

kenvizena — Thu, 04 Jul 2019 00:47:52 GMT

I have the same issue, it worked until I upgraded to the latest version. The odd thing is when I choose the device group, nat rules and everything else shows up, but not security policies.

Weird, I am sure there will be an update to fix whatever was broken.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

sjanita — Thu, 04 Jul 2019 04:39:46 GMT

this is due to a change in default behavior - introduced in 1.1.24 - choosing 'All' displays all policies from all DG's for example.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

kenvizena — Thu, 04 Jul 2019 04:47:26 GMT

In prior versions if I had a Panorama connected dg I could see it in security policies. I can see nat and all of the other elements, but not policies. Occasionally when loading I will see a brief flash of the policies and then a blank screen. No weird errors in the logs.

I use Expedition for fifty or sixty ha pairs and selectively choose log export since most of our firewalls generate 15-50gb of logs per day. I don't see any form of resource constraint since our primary VM is in a server farm.

I loaded it on a vm at my house on a 1.1.24 and it works as expected. I can see the policies, so did I miss something in the release notes?

Anyhow, thanks for the help!

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

aaronlevy — Thu, 04 Jul 2019 15:46:59 GMT

We are not seeing any policies at all, either selecting all or specific device group.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

sjanita — Thu, 04 Jul 2019 20:38:53 GMT

can you create a new project, import the panorama config again and let me know if you are ablew to see the policies in the new project?

i'm trying to narrow the issue to a global issue with your Expedition or something that may be specific to the project.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

kenvizena — Thu, 04 Jul 2019 20:56:32 GMT

I have removed all devices and projects about fifteen times on the current release and the policies don't show up. If I manually enter a non-Panorama firewall it works. I have tried with about twenty different Panorama managed dg's, none of them show up. I have expanded the dg's and imported them and the Panorama dg's do not show polices, but nat, pbf, and all other objects show up.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

aaronlevy — Thu, 04 Jul 2019 21:02:22 GMT

Also have done the same process as @kenvizena countless times with similar results, although even if an individual Firewall is imported the policy still doesn't show for a specifc vsys. As a test iimported the Panorama xml into a test Expedition VM running v1.1.23 and the policies were displaying as expected. For various reasons I can't transfer the ~80GB of traffic logs to this test VM in order to run ML and produce a Greenfield Policy. Hopefully we can get this working again in current versions...

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

sjanita — Fri, 05 Jul 2019 05:48:43 GMT

@kenvizena can you export project file and email to fwmigrate @ paloaltonetworks.com for debugging.

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

kenvizena — Fri, 05 Jul 2019 08:34:48 GMT

Yep, I will do it in the morning.

Thanks for the help!

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

EikeChristian — Thu, 16 Feb 2023 13:10:42 GMT

Is there somewhere a solution written?

Re: Panorama Project - Security Policies not showing for "all" or specific device-groups

lychiang — Thu, 16 Feb 2023 17:04:15 GMT

Hi @EikeChristian Solution will be upgrade your expedition to the latest version 1.2.51