In shared location created Log-Forwarding profile, which is not displaying in the security policy of a particular device group.

AkashThangavel — Wed, 26 Jul 2023 09:38:15 GMT

Hi team,

I built a device group hierarchy for a Customer to maintain some shared objects.

In all the locations, the common log-forwarding profile is showing, except in QJP-PA-FW

PA-FW

But when I tried to push from the cli in set commands it accepted without any error and the commit was also successful in the panorama.

-------------------------------------------------------------CLI command--------------------------------------------------------

>set cli device-config-output set

>configure

#set device-group PA-FW pre-rulebase security rules "LAN-WAN" log-setting Log-forwarding-to-panorama

#set device-group PA-FW pre-rulebase security rules "Block-LAN-WAN" log-setting Log-forwarding-to-panorama

----------------------------------------------------------------------------------------------------------------------------------------

PA-FW Firewall configuration is successfully pushed.

Please let me know the solution to this.

regards,

Akash Thangavel

Network Security Engineer

Re: In shared location created Log-Forwarding profile, which is not displaying in the security policy of a particular device group.

ozheng — Wed, 26 Jul 2023 14:40:28 GMT

Hello Akash,

You can open a ticket to TAC to report the issue.

You use your workaround until a definitive solution is released.

Not sure there is much more to say here.

Olivier