Panorama 10.0 Issue with Risk Factor displaying as zero

samuraihack — Tue, 08 Dec 2020 20:50:39 GMT

Hey everyone! So one of customers recently migrated to PAN-OS 10.0. They have a couple of firewalls, a M200 as a log collector and a Panorama appliance. The ACC initially doesn't show any data, which it did with previous releases. We must switch in a drop down menu and select the DataSource: Remote Data Device, which apparently loads data from the log collector and successfully populates the Panorama's ACC. However the Risk Factor still appears as zero, even though the Risk Factor in the devices is not zero. Is this a known issue for this release? How can we simply sum all data across our multiple devices?

Re: Panorama 10.0 Issue with Risk Factor displaying as zero

Gustavo_Aristi — Tue, 08 Dec 2020 21:51:48 GMT

According to PANW TAC, 10.0 is not a "preferred" stable release. For Pan-OS 10 there is not a preferred release yet as far as I know:
https://live.paloaltonetworks.com/t5/Customer-Resources/Support-PAN-OS-Software-Release-Guidance/ta-p/258304

Things that come to mind (assuming this was working prior to the upgrade):

Restart the log receiver process and/or the management server (maintenance window recommended)

debug software restart log-receiver

debug software management-server

PAN-38255 - Known issue might be related but it's not a 100% match.

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-release-notes/pan-os-10-0-release-information/known-issues/known-issues-related-to-pan-os-10-0-releases/pan-os-10-0-1-known-issues.html

topic Panorama 10.0 Issue with Risk Factor displaying as zero in General Topics

Panorama 10.0 Issue with Risk Factor displaying as zero

Re: Panorama 10.0 Issue with Risk Factor displaying as zero