topic Re: Will the panorama log collector collect logs if synchronization with firewalls is disabled? in Panorama Discussions

Will the panorama log collector collect logs if synchronization with firewalls is disabled?

d.polynin — Mon, 12 Feb 2024 02:40:08 GMT

I have a panorama server.

System Mode panorama

If I set up a log collector and connect firewalls to the panorama, without synchronizing shared policies and templates.
Will the panorama log collector collect logs if synchronization with firewalls is disabled?

That is, I don’t want to manage firewalls from the panorama at the moment, but I want it to collect all the logs from the firewalls.

If I need to in the future, I will enable synchronization of policies and templates

Re: Will the panorama log collector collect logs if synchronization with firewalls is disabled?

PavelK — Mon, 12 Feb 2024 07:48:27 GMT

Hello @d.polynin

yes, this is possible. After you register a Firewall in Panorama and assign Firewall’s serial number to log collector you can start receiving logs without having Panorama to manage configuration by Device Groups/Templates.

Kind Regards

Pavel

Re: Will the panorama log collector collect logs if synchronization with firewalls is disabled?

d.polynin — Mon, 12 Feb 2024 08:23:53 GMT

Hi Pavel,

thank you very much for the answer

Re: Will the panorama log collector collect logs if synchronization with firewalls is disabled?

reaper — Mon, 12 Feb 2024 08:24:38 GMT

to add to the 'yes" from @PavelK : you don't actually need to disable anything if your intent is to one day manage the firewalls from panorama

as long as you don't add them to a device group or template, you won't push any configuration down to them. This saves the extra steps of going to disable which will lead you to needing to re-enable in the future