topic Re: Device Gropus: How to see previously devices in Next-Generation Firewall Discussions

Device Gropus: How to see previously devices

Richard_M — Mon, 26 Jun 2023 13:08:45 GMT

Hi,
We got an RMA, but for the new fw there has not been selected any devices. It was a lot back and forth when trying to set up and add the new fw to Panorama, so in the process the old fw has been deleted from Panorama.

Does anyone know if there is possible to see or find out which devices that have previously been selected in the different device groups without any hugh operations?

Re: Device Gropus: How to see previously devices

Alin.Scarlat — Fri, 23 Jun 2023 08:06:57 GMT

Hi @Richard_M ,

If you know when this was done, I would use the Config Audit menu in Panorama -> Config Audit

In there you'll be able to see exactly what has been changed and you should be able to see the device serial number that was removed from the device group and rules (if the targets were not "any").

Re: Device Gropus: How to see previously devices

PavelK — Fri, 23 Jun 2023 13:54:15 GMT

Hello @Richard_M

apart of looking into config audit suggested by Alin, you should be able to see it in configuration logs under: Monitor > Logs > Configuration, then use this filter:

( full-path contains '/config/devices/entry[@name=\'localhost.localdomain\']/device-group/entry[@name=' )

Also add a column "Device Group":

Below as a sample:

If you have configuration log history old enough you should be able to see Device Group and Firewall assignment. You can identify Firewall based on Serial Number.

Also, you mentioned you did RMA replacement. You can replace Firewall with the procedure in this KB. In this way Panorama will replace old S/N with new one in all its configuration, so you do not have to do it manually.

Kind Regards

Pavel

Re: Device Gropus: How to see previously devices

Richard_M — Mon, 26 Jun 2023 08:22:22 GMT

Hi @Alin.Scarlat
Thanks for advice. Found what I was looking for. This was a pretty way to see and find much more also 🙂

Re: Device Gropus: How to see previously devices

Richard_M — Mon, 26 Jun 2023 08:26:01 GMT

Hi @PavelK
Thank you for this information. I see your way also provided much more information than about many other things that probably will come in handy later. And for the guide to replace the firewall. I will look into that. It was a lot fewer steps than the guide I looked at.