topic Technical Documentation when Panorama does a push to a NGFW in Panorama Discussions

Technical Documentation when Panorama does a push to a NGFW

RoutingWithJon — Fri, 09 Jul 2021 03:24:36 GMT

Hi All,

I'm hoping to understand a bit more around how a Panorama device will push config to a NGFW. I've heard things such as Panorama doesn't actually send the config to the NGFW but the NGFW constantly polls the configured Panorama Server but I'm unable to find any technical documents around this to understand what sort of protocol/port it uses and what sort of behaviour happens under the hood.

Does anybody have any diagrams/white papers or understand around this process that they can share?

Thanks.

Re: Technical Documentation when Panorama does a push to a NGFW

OtakarKlier — Fri, 09 Jul 2021 17:52:52 GMT

Hello,

With regards to the configuration, Panorama pushed the configs to the PAN's. With regards to logging, the PAN's send their logs to Panorama.

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/panorama-overview/panorama-commit-validation-and-preview-operations.html

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-large-scale-firewall-deployments/manage-firewalls-with-panorama-interconnect/push-the-panorama-node-configuration-to-managed-devices.html

Regards,