article Updates on Certificates for GlobalProtect App Log Collection Feature in GlobalProtect Articles

Updates on Certificates for GlobalProtect App Log Collection Feature

vathreya — Tue, 12 Jul 2022 06:31:02 GMT

Please be sure to update the certificates for GlobalProtect App Log Collect and ADEM on Panorama Managed Prisma Access and NGFW by performing the following.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

jasonwald — Wed, 16 Mar 2022 19:55:54 GMT

You say "If you are using Panorama to manage Prisma Access and NGFW"

So it makes me think it applies to me because I manage my NGFW's with Panorama however I do not use Prisma Access. You should state in BOLD if you are not using Prisma Access this does not apply to your organization.

Please correct me if I am wrong.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

FranCote — Wed, 16 Mar 2022 20:29:36 GMT

Hello,

Similar situation to Jasonwald's question above... We do not use Panorama or Prisma with our firewalls, so does this not apply to us at all? We do use GlobalProtect, but I'm not seeing any certs related to that in the system.

Thank you!

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

Steven.Villanueva — Wed, 16 Mar 2022 22:08:23 GMT

Is this related to only those that are pointing their global protect clients to Prima ADEM service? https://www.paloaltonetworks.com/sase/adem

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

CoAAdmin — Thu, 17 Mar 2022 05:44:44 GMT

Palo support... please clarify if this does NOT apply to those users that have deployed Global Protect but are not using NOT Panorama or Prisma.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

aabozaid — Thu, 17 Mar 2022 07:56:41 GMT

please clarify if this apply to only those users that are using Panorama or Prisma ?

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

T_Wojtasinski — Thu, 17 Mar 2022 09:40:48 GMT

Exactly - what about clients that have deployed Global Protect on physical or VM FW's but are not using Panorama or Prisma.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

JKoss — Thu, 17 Mar 2022 17:44:58 GMT

Lurking here to get confirmation this is not an issue for physical firewalls....

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

jonwest1 — Fri, 18 Mar 2022 15:43:07 GMT

Same, I need clarification as well

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

sarao — Fri, 18 Mar 2022 18:31:07 GMT

Hello everyone,

The GlobalProtect App Log Collection feature is available for both NGFW GP Subscription and Prisma Access Customers.

NGFW GP Subscription based customer require Panorama with the Cloud Plug-in and a CDL License to use this feature. More details are available in the tech docs at: https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-new-features/new-features-released-in-gp-app/globalprotect-app-log-collection-for-troubleshooting

If your customer does not use the GP App Log Collection feature or ADEM, this article will not be applicable to them.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

jasonwald — Fri, 18 Mar 2022 18:44:07 GMT

Thank you. Also learned something new that I was aware of, NGFW GP Logging to Cortex DL.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

matt-sarich — Fri, 18 Mar 2022 20:49:01 GMT

This seems to be a PAN OS 10 related feature.

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-app-log-collection-for-troubleshooting/configure-the-app-log-collection-settings-on-the-globalprotect-portal

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

apazmino — Wed, 13 Apr 2022 21:51:54 GMT

Its not clear.. Please, could you be more clear, due to more than one customer ask to me for this announcement because they use GP client for NGFW. tks

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

Brett.Hoshaw — Mon, 25 Apr 2022 19:18:06 GMT

My rep told me that this only applies to those using ADEM.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

Oblagonte — Mon, 30 May 2022 04:49:56 GMT

Hi All,

We don't have option to renew but only have option "Generate Certificate for GlobalProtect App Log Collection and Autonomous DEM".

Should we generate new one or just ignored it.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

Brooks_Hassinger — Tue, 31 May 2022 13:10:39 GMT

Hello,

After clicking "Renew Certificate for GlobalProtect App Log Collection and Autonomous DEM" I get a message saying that the cert was successfully renewed. However, after I click OK, I can see that the ADEM cert is still slated to expire on 6/4/2022.

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

jgreen1280 — Tue, 31 May 2022 15:32:18 GMT

@Brooks_Hassinger

I was having this issue as well.

Today, I modified all my portal configs, removing this cert, then exported the cert with private key, just incase.

Next, I deleted the cert. After deleting I performed a commit-push, after push completed, I clicked the option "Renew Certificate...." from the Cloud Services plugin. This time, it generated a new cert with an expiration of:

May 31 15:15:10 2023 GMT

Now I am reconfiguring my portal agent configs to push that cert.

Hope this heps!

Re: Updates on Certificates for GlobalProtect App Log Collection Feature

Brooks_Hassinger — Tue, 31 May 2022 15:44:25 GMT

@jgreen1280 Thanks, that did the trick!