Firewall and Panorama mangement certificate expire

vfinetwork_support — Tue, 09 Apr 2024 07:41:53 GMT

Hi,

We recently upgraded the firewall models 3220 and 820 last week and are managing them through Panorama. However, we received an alert message yesterday and also getting the alert message if i logging the panorama. Should we ignore this alert? To check if the certificates are up to date, can we use the command "debug management-server panorama-root-ca-info." Using this command should not have any negative impact.

“If you are unable to manage NGFWs from Panorama or have issues with log collection on Log Collector due to expiration of Panorama management certificate on April 7, 2024 please consult the advisory for details and knowledge base article for remediation”

Re: Firewall and Panorama mangement certificate expire

Alin.Scarlat — Tue, 09 Apr 2024 15:10:51 GMT

Hello @vfinetwork_support ,

You can see if you are affected in the Panorama Managed Devices. They all should appear in sync.

Also, another way to find out if you are affected or not is to check the System messages of both Panorama and Palo Alto Firewalls for:

Panorama certificate for Managing NGFWs and log collectors has been successfully extended until 19-Nov-2033

This message will appear if you have at least version 8822 as content update.

I hope this helps.

topic Re: Firewall and Panorama mangement certificate expire in Panorama Discussions

Firewall and Panorama mangement certificate expire

Re: Firewall and Panorama mangement certificate expire