topic Re: forward logs to panorama without managing or on-boarding firewalls in panorama in General Topics

forward logs to panorama without managing or on-boarding firewalls in panorama

Sajjadazamkhan — Tue, 06 Jun 2017 17:48:17 GMT

I am looking for the best solution on forwarding taffic and audit logs to a Panorama without registering the firewalls in panorama. The goal is that Panorama should not manage those firewalls as they are in lab environment but would collect logs only. Please let me know if you have done something similar.

Re: forward logs to panorama without managing or on-boarding firewalls in panorama

Raido_Rattameister — Tue, 06 Jun 2017 18:11:27 GMT

You don't have to manage firewall from Panorama.

Add firewall to Panorama and configure log profile to send logs to Panorama but you can keep on adding rules and configuration changes directly on the firewall.

Re: forward logs to panorama without managing or on-boarding firewalls in panorama

pulukas — Tue, 06 Jun 2017 23:04:46 GMT

I had used Panorama this way initially on a deploy. Adding the firewalls with centralized logs and keeping all configuration local without using groups or templates.

Panorama also gives you the interface to access the local GUI directly from Panorama so you don't have to leave to make the local changes either.

We then migrated slowly a firewall at a time to using groups and templates.