topic Re: Day 1 Configuration of PAN-410 model firewall in General Topics

Day 1 Configuration of PAN-410 model firewall

Sujanya — Mon, 19 Sep 2022 17:24:52 GMT

I created day 1 config file for my PA-410 model firewall and loaded the configuration. But while commiting Got below error:

"email-scheduler -> Possible Compromise -> report-group 'Possible Compromise' is not a valid reference
email-scheduler -> Possible Compromise -> report-group is invalid "

When I double checked the file I downloaded from Palo-alto portal all these configuration are inside <shared..</shared> xml tag, Not sure why shared tag is coming in picture for palo-alto

Kindly suggest on the same.

Re: Day 1 Configuration of PAN-410 model firewall

JayGolf — Mon, 19 Sep 2022 21:01:15 GMT

Hi @Sujanya ,

Can you try removing the report group "Possible Compromise" and commit once removed?

Re: Day 1 Configuration of PAN-410 model firewall

Sujanya — Tue, 20 Sep 2022 03:58:37 GMT

Hi @Jay ,

Thank you so much. It worked after deleting the report Group. Now I can see certain templates in the firewall configuration named "ztp-profile". Is this the expected configurations we will get once Day 1 configuration is uploaded to the firewall.

Re: Day 1 Configuration of PAN-410 model firewall

023101004283 — Sat, 25 Feb 2023 21:11:35 GMT

Hello am having same issue

Re: Day 1 Configuration of PAN-410 model firewall

APiccione — Mon, 27 Feb 2023 21:37:52 GMT

How do you do this if you don't have that option in the Montior Tab? I only have Logs, Packet Capture and Session Browser on my 410.

Thanks!

Re: Day 1 Configuration of PAN-410 model firewall

MynhardtvdWalt — Fri, 02 Jun 2023 08:04:17 GMT

By design, the new firmware and PAN-410 don't have local data logging ability so the monitor tab reduces. The day1 config breaks due to the report group config on a device that doesn't support logging. Worked around it by removing the "Possible Compromise" section in the day1 XML and then uploading it.