topic Re: Device Telemetry can't be removed/disabled from Panorama and/or local in Next-Generation Firewall Discussions

Device Telemetry can't be removed/disabled from Panorama and/or local

mattlede — Fri, 09 Sep 2022 09:20:20 GMT

We currently have difficulties to remove the Device Telemetry options in any way. it seems as this Options doesn't work as expected. This issue persisted across several Versions of PanOS / Panorama

Panorama 10.2.2-h2

- When trying to remove the device telemetry options from the template stack the settings are still checked and a commit & push doesn't change any settings on the firewall itself PA-3250.

- PA-220 in a active/passive Cluster with PanOS 10.2.2 can't disable the settings either.

Are there any other Options/Ideas on how to remove the welcome banners like

Kind Regards

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

fgraziosip4 — Tue, 27 Sep 2022 12:09:43 GMT

I have opened a case with PaloAlto and I want to see what their fix is.

I am running 10.2.1 and 10.2.2 on my firewalls.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

ElliotM — Tue, 27 Sep 2022 12:08:45 GMT

I have the exact same issue, i have also tried to disable telemetry via the CLI however it is still enabled.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

fgraziosip4 — Tue, 27 Sep 2022 12:11:57 GMT

Well I have a case open and if they have a fix, I will publish it.

Got to say lately the PanOS has not been as solid as was in the past. Perhaps was just my experience but 10.1 was ok for my firewalls and Panorama but when I went to 10.2.2 I had issues with Panorama and firewalls.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

ElliotM — Tue, 27 Sep 2022 12:19:48 GMT

@fgraziosip4 i agree, i would even say its generally been worse since 9.1 !

If you do get a fix please let us know.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

fgraziosip4 — Tue, 27 Sep 2022 16:13:34 GMT

I do not have a fix but I reported the issue on a case and showed the engineer (zoom call) what happens if you disable via UI.

He has all the details and should be reported as bug.

9.1 is the old UI, definitely 10 is prettier, but it has his costs. I guess this is one of them.

I am waiting for a patch for panorama to fix the config export bug.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

TCBenedetto — Thu, 13 Oct 2022 10:10:46 GMT

Running 10.2.2-h2 and see this exact same issue. Every time you context switch or log directly into the firewall you get prompted to turn on telemetry.

Speaking of context switching I have noticed when I switch from Panorama to a firewall, I no longer have the option to switch to another firewall and can only switch back to Panorama. Removal of the other Panorama controlled firewalls causes unnecessary step of an additional context switch. Anyone else seen this issue?

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

fgraziosip4 — Thu, 20 Oct 2022 08:30:32 GMT

Hi Guys,

I do not have news on the case about telemetry as still with Pan techsupport.

I do not use the switching from Panorama, I just go directly to the firewall. i suppose different way of working. Also, I am impatience and would rather go directly as it seems quicker.

Fra

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

sebblondeau — Wed, 26 Oct 2022 13:02:37 GMT

Hi, I have the same issue... Do you have any news from support?

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

ElliotM — Fri, 18 Nov 2022 09:23:45 GMT

seems this is resolved in PanOS 11.0:

PAN-202535	Fixed an issue where the Device Telemetry configuration for a region was unable to be set or edited via the web interface.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

jkvalk — Thu, 24 Nov 2022 08:40:34 GMT

Pls just gimme a sanity check here. PAN-202535 is not listed anywhere else than in 11.0 release notes, right? I'm not seeing it as known issue under 10.2.0. Is the issue tracking system really _so_ bad? I mean despite it not even resembling an actual issue tracking system, they would not even care to keep known-issues lists somewhat accurate?

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

Steph01 — Thu, 02 Feb 2023 16:03:07 GMT

any update on this?

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

ElliotM — Thu, 02 Feb 2023 16:12:44 GMT

Hi,

I can see this in the 'addressed issues' section for PANos 11.0.

I agree Palo Alto are poor at tracking bugs. Known issues are not published most of the time!

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

ElliotM — Thu, 02 Feb 2023 16:13:17 GMT

Its fixed in PANos 11.0 i assume other versions will not get the fix!

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

fgraziosip4 — Fri, 03 Feb 2023 08:57:00 GMT

Hi Guys,

I spoke to support and this has been addressed on v11.0 and 10.2.4. 10.2.4 would be released in March (hopefully) while v11 is out. I have not upgraded to v11 and I will wait a while prior to moving into it. It seems that since v10 (UI upgrade) things are not as sturdy as before.

Re: Device Telemetry can't be removed/disabled from Panorama and/or local

PavelK — Fri, 31 Mar 2023 02:22:40 GMT

Today, PAN-OS 10.2.4 and 11.0.1 were released. These versions are addressing some of the device telemetry issues discussed in this thread:

PAN-207390
Fixed an issue where, even after disabling Telemetry, Telemetry system logs were still generated.

PAN-202535
Fixed an issue where the Device Telemetry configuration for a region was unable to be set or edited via the web interface.

PAN-210331
Fixed an issue where the firewall did not send device telemetry files to Cortex Data Lake with the error message send the file to CDL receiver failed.

Kind Regards

Pavel