topic Access errors while adding firewall to panorama in General Topics

Access errors while adding firewall to panorama

talha.temel — Tue, 02 Aug 2022 06:54:31 GMT

Hi everyone,

When we add our firewall to panorama, we faced with some issues. Access problems occurred due to LDAP profile password and PSK in IPsec tunnels. We had to back to our old configuration and delete firewall from panorama. As we know there are major difference on their versions but all goes by book. I will mention the versions below. And also Panorama 10.1 versions there is key necessity as a new and it is configured aswell.

If anyone have a knowledge for this, it would be good the some recommends.

Panorama, 10.1.4-h4

Firewall, 10.0.8-h8

Thank you and best regards.

Re: Access errors while adding firewall to panorama

PavelK — Tue, 02 Aug 2022 11:38:55 GMT

Hello @talha.temel

regarding the issue: "Access problems occurred due to LDAP profile password and PSK in IPsec tunnels" you might be hitting a bug:

PAN-188009 that was fixed in version 10.1.6. I would recommend to upgrade to version 10.1.6-h3 that is latest and has this bug fixed.

Regarding the secure onboarding, this feature was introduced in PAN-OS 10.1.3: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/panorama-features/authentication-key-for-secure-firewall-onboarding however this should not be related to the first issue you mentioned.

Kind Regards

Pavel

Re: Access errors while adding firewall to panorama

talha.temel — Tue, 02 Aug 2022 12:06:21 GMT

Hi PavelK,

Thank you, I was looking for that but i couldn't find any.

Best regards.

Talha