Paloalto NGFW file system integrity check??

JoDongWook — Mon, 27 Apr 2020 18:44:38 GMT

this is jo. from S.Korea

case(PA-3060 / PAN-OS 8.0.7)
customer want to check
'file system integrity check' when it occur.(monitor->system log)
when the integrity log occur want to send to Syslogserver.

test.
I`d reboot Pa-220 and checked system log however I cant find any integrity log.

Qustions
1, how can I find integrity log?
2. Integrity check really occur when PA on boot or after 90days?
3.do I need Panorama to check it?

I refer this Doc
https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/troubleshooting/troubleshoot-panorama-system-issues/monitor-the-file-system-integrity-check.html

Thank for your help

Re: Paloalto NGFW file system integrity check??

kiwi — Wed, 29 Apr 2020 12:38:06 GMT

Hi @JoDongWook ,

If everything is ok and the check passes, the appliance generates a System log (Monitor > System Log) of informational severity and boots successfully. If the check detects a software corruption or possible device tampering, starting with 8.1.3, the appliance boots in to maintenance mode and you must contact Palo Alto Networks Customer Support for assistance. We’ll help you to learn more about what caused the check to fail.

As per this DOC:

PAN-OS 8.1.1 Software Integrity Check – What Happens When a Device Fails this Check?

topic Paloalto NGFW file system integrity check?? in General Topics

Paloalto NGFW file system integrity check??

Re: Paloalto NGFW file system integrity check??