Identifying Source IP Addresses for Routing Palo Alto Firewall Logs to an Azure Collector via IPSec Tunnel

Ndeup_DIALLO — Fri, 31 Oct 2025 18:23:42 GMT

Hello,

As part of the implementation of log forwarding to an Azure collector, we would like to identify the source IP addresses currently used for routing logs from our equipment.

An IPSec tunnel is already in place between the front-end and Azure.

How can we identify the source IP addresses for routing logs from the following devices to the collector with address X.X.X.X :

This information will be used to finalize the configuration of the log flow to Azure.

How can I find the source IP addresses of a firewall Palo Alto?

Re: Identifying Source IP Addresses for Routing Palo Alto Firewall Logs to an Azure Collector via IPSec Tunnel

Raido_Rattameister — Fri, 31 Oct 2025 19:56:56 GMT

By default traffic initiated from the firewall will have mgmt IP as source.

You can find mgmt IP at:

Device > Setup > Interfaces

If you wish to change source IP then it can be adjusted at:

Device > Setup > Services > Service Route Configuration

topic Identifying Source IP Addresses for Routing Palo Alto Firewall Logs to an Azure Collector via IPSec Tunnel in General Topics

Identifying Source IP Addresses for Routing Palo Alto Firewall Logs to an Azure Collector via IPSec Tunnel

Re: Identifying Source IP Addresses for Routing Palo Alto Firewall Logs to an Azure Collector via IPSec Tunnel