Send logs to Panorama without Panorama managing the firewall

ScottF — Mon, 17 Dec 2018 20:37:29 GMT

This might be a really weird question and I expect people to ask why I want to do this. If that is going to be your response, then please don't respond. I have a couple PA-220s at a remote location. I want to send logs from the PA-220s to Panrorama. I don't want to push configurations from Panorama to the devices (well maybe templates are okay, but definately not Objects or Policie). I figure that I could possibly configure the Panorama IPs on the firewalls. Then maybe manage the firewall from Panorama. Then possbily add the firewall to get a template, but not assign an object group. I don't want the shared objects to populate to the PA-220. Will this config work?

Re: Send logs to Panorama without Panorama managing the firewall

JoergSchuetter — Tue, 18 Dec 2018 13:48:24 GMT

I simply "told" the remote firewall the name of panorama and enabled logging to panorama. This was sufficient (if I remember it correct) to have the logs on panorama.

We manage the licenses with panorama, but don't know if this is required.

As long as you do not bind the serial number with a template / device group (on panorama), you will not interfere with the local config.

topic Send logs to Panorama without Panorama managing the firewall in Log Forwarding Discussions

Send logs to Panorama without Panorama managing the firewall

Re: Send logs to Panorama without Panorama managing the firewall