topic Re: if panorama occurred network loss of network connection? in General Topics

if panorama occurred network loss of network connection?

willstech — Sun, 13 Nov 2011 21:08:40 GMT

hello there.

I'd like to know what happen, if network disconnected between panorama and PAN mgmt network.

if panorama network has a disconnect with problem of NIC, PAN device won't send logs to panorama.

but i'd like to send logs without loss of logs from PAN device to panorama even though panorama network disconnected at that time.

How can PNA device send all of the logs without loss of logs?

is it possible to caching to protect loss of logs at the PAN device?

if it is impossible to cache or other ways to protection logs, does it will be losing the logs during disconnected of network between a panorama and PAN device?

Please explain me how can protect loss of logs by what kind of algorithms.

Thanks.

Re: if panorama occurred network loss of network connection?

schiang1 — Tue, 15 Nov 2011 07:54:04 GMT

Panorama will buffer the logs if there is loss of connectivity to a device. I believe buffered log forwarding from device is enabled by default.

Re: if panorama occurred network loss of network connection?

bpappas — Wed, 16 Nov 2011 02:09:30 GMT

Log buffering was introduced in the 4.0 release of PAN-OS. Prior to 4.0 logs were not buffered. If a log forwarding window was unsuccessful the logs would not be forwarded to Panorama during any subsequent log forwarding window.

Therefore you need your devices and Panorama to be running PAN-OS 4.0 or later on your systems.

thank you,

Benjamin