topic Re: Panorama Log Collector Device Replacement in General Topics

Panorama Log Collector Device Replacement

prashanth_r — Wed, 31 Jan 2024 14:51:41 GMT

Hi There,

One of the cluster's PA firewalls was faulty and replaced with the RMA unit. In the environment, we have a Panorama setup as a log collector. As the policy packages are not managed in Panorama, is modifying the faulty device serial number sufficient?

I hope I need only to perform the below steps.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CljGCAS

Thanks in Advance

Re: Panorama Log Collector Device Replacement

PavelK — Wed, 31 Jan 2024 22:40:52 GMT

Hello @prashanth_r

thanks for posting.

Since you do not manage configuration from Panorama the entire process is limited to KB you mentioned with SN replacement and do not forget to commit and push configuration to log collector. Without pushing it to log collector group you will not be able to see logs from Firewall.

Kind Regards

Pavel

Re: Panorama Log Collector Device Replacement

prashanth_r — Sun, 04 Feb 2024 12:05:05 GMT

Thank you for the reply.
Indeed I found something on the Panorama side where the mode was not collector but rather is Panorama.
But I don't see the firewall policies in Panorama. Is there any way I can confirm the firewall policies are not managed by Panorama at all?

Thank You

Re: Panorama Log Collector Device Replacement

PavelK — Sun, 04 Feb 2024 22:48:05 GMT

Hello @prashanth_r

thank you for reply.

If you navigate in Panorama to the top right, you will see "Global Find":

After you paste there Firewall's Serial Number and press enter you will get a list of configurations where Panorama configuration is used for that Firewall:

Kind Regards

Pavel