topic Re: panorama HA sync not showing in General Topics

panorama HA sync

Jatin.Singh — Sun, 09 Feb 2020 23:50:53 GMT

The physical firewalls was relocated and renamed from FWDAN-BYTWAN01/02 to FWSCO-BYTWAN01/02 with new mgmt. ips.Then we removed and added the firewalls back to one of the Panorama (vaemp-pan01) which was active that time. But the other panorama (vaalb-pan01) is still showing old names and discounted. Do we have to manually add the Firewalls again on the second Panorama vaalb-pan01, even its in HA?

We do understand reading the following document management settings don't sync when it comes to firewalls itself but is it the same case with panorama templates or device group?

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/reference-ha-synchronization/what-settings-dont-sync-in-activepassive-ha

This document does not mention that firewalls management ip and names won;t sync when using panorama.

https://docs.paloaltonetworks.com/panorama/7-1/panorama-admin/panorama-high-availability/synchronization-between-panorama-ha-peers

Re: panorama HA sync

reaper — Tue, 11 Feb 2020 13:08:54 GMT

Hi @Jatin.Singh unfortunately those documents are not related to whay you are seeing

the second panorama will only get to see the updated infornation once the firewalls conenct to it and sync their host infornation, so disconnecting the primary would be a quick way to update this infornation

Re: panorama HA sync

Jatin.Singh — Wed, 12 Feb 2020 00:06:35 GMT

@reaper Sorry,did you mean disconnect primary panorama from firewalls and update the host information on firewalls manually ? and then connect them back to both panoramas?

Re: panorama HA sync

reaper — Wed, 12 Feb 2020 07:18:16 GMT

@Jatin.Singh no

pnorama receives the hostname once the firewall connects to it, so after you changed the hostname, the second panorama will only receive the new hostname when the firewall connects to it and reports its new hostname

Re: panorama HA sync not showing

Sethupathi — Wed, 04 Nov 2020 18:38:28 GMT

Hi Reaper,

I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template showing as in sync but active device template disappear.

PFA below for your reference,

Any suggestions? I didn't see any related article in the community.