topic Re: Post fixing the firewall from maintenance mode , facing issue in log forwarding in Next-Generation Firewall Discussions

Post fixing the firewall from maintenance mode , facing issue in log forwarding

Sujanya — Mon, 12 Dec 2022 10:21:52 GMT

All,

Recently our production PA-440 model firewall went into maintenance mode, and post rebooting it came back and all started working fine without any issue.

After few minutes of firewall came up, it stopped generating and forwarding (traffic, Threat and configuration) logs to panorama.

we did restart log-receiver and mgmt of the firewall , but still the issue didn't fixed. After 2 days of issue we found 2 logs of traffic logs has been generated and sent to Panorama. But after that no more progress , still the issue is persisting.

Any suggestion on the same.

Re: Post fixing the firewall from maintenance mode , facing issue in log forwarding

Raido_Rattameister — Mon, 12 Dec 2022 16:04:51 GMT

Is firewall mgmt and Panorama in same subnet?
If not then do you see connection attempts in traffic log?

Check ms log in firewall

less mp-log ms.log

tail follow yes mp-log ms.log

Re: Post fixing the firewall from maintenance mode , facing issue in log forwarding

Sujanya — Wed, 14 Dec 2022 09:29:20 GMT

Hi @Raido_Rattameister

Just to update on the case, as soon as we cleared few sessions in session browser, we could see the logs in firewall same was forwarded to Panorama as well.