Panorama connectivity issue

Mikael.Andre — Sun, 17 Jan 2016 12:47:32 GMT

Hi everybody,

When I configured my new firewalls to register with my panorama, they didn't appear.

I checked the following points:
- Connectivity between my firewalls and my Panorama : OK => I do some packet captures on both side
- TCP bidirectional traffic on port 3978 : OK => I do some packet captures on both side
- Re-generate SSL certificates on my Panorama : OK => On my Panorama web gui, I see my certificate marked as valid.
- Copy-paste serial number from my firewall to my Panorama : OK
- Allow IP of my firewall on my Panorama's managment interface : OK => I configured it
- PAN-OS version on my both equipment : OK => we are in 6.1.8
- Reduce MTU size : OK => MTU = 1300 on my firewall because we pass into VPN tunnel to contact my Panorama.
- NTP synchronization : OK => Both equipments are on time.

I checked these topic:
https://live.paloaltonetworks.com/t5/Management-Articles/Troubleshooting-Panorama-Connectivity/ta-p/54224
https://live.paloaltonetworks.com/t5/Management-Articles/Connectivity-Issues-with-Panorama/ta-p/56445

If anyone has got this issue, I'll be happy to know the resolution.

Have a nice day.

Mikaël

Re: Panorama connectivity issue

Kalemegdan — Mon, 18 Jan 2016 23:05:20 GMT

can you ping panorama host from your new firewall CLI using firewall management interface IP as a source?

Not sure but you might need to adjust source routing (for Panorama) only to use management interface IP; i had simmilar issue that solved with source routing setting.

topic Panorama connectivity issue in General Topics

Panorama connectivity issue

Re: Panorama connectivity issue