topic Re: Add a Ztp paloalto firewall to panorama in General Topics

Add a Ztp paloalto firewall to panorama

qmso475 — Mon, 24 Apr 2023 08:09:50 GMT

Hi Sir.

Working in ztp mode and trying to work with the Palo Alto firewall.

I saw that link and set it up, but the connection is failing. ↓

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/set-up-zero-touch-provisioning/install-the-ztp-plugin/register-panorama-with-the-ztp-service/register-panorama-with-the-ztp-service-for-existing-deployments

panorama os : 10.2.4

ztp plugin : 2.0.3

ztp mode firewall os : 10.1.2

Re: Add a Ztp paloalto firewall to panorama

S.Cantwell — Tue, 25 Apr 2023 13:12:03 GMT

Good Day

The sync failure is stating that the mgmt IP of the Panorama is not communicating with the Sync Service.
I would verify NTP is enabled on the Panorama, ensure you have 2 public DNS server (as a test), I would ensure that the Panorama has its Device Certificate downloaded/installed... and I would have Telemetry enabled (just as a test).

A web/TAC case may be recommended to help resolve the "back office" web connectivity to the Sync Service.

Re: Add a Ztp paloalto firewall to panorama

qmso475 — Wed, 26 Apr 2023 02:03:26 GMT

@S.Cantwell

NTP is enabled.

What do you mean by downloading device certificates?

Certificate Management > Certficates ??

Re: Add a Ztp paloalto firewall to panorama

qmso475 — Wed, 26 Apr 2023 02:03:52 GMT

@S.Cantwell

NTP is enabled.

What do you mean by downloading device certificates?

Certificate Management > Certficates ??