topic Re: Panorama<->Firewalls connectivity issue in General Topics

Panorama<->Firewalls connectivity issue

ayoubAitkhouya — Sun, 07 Feb 2021 15:41:46 GMT

Hi all,

After I modify the route service and restore it to the state before the firewalls (2 HA firewalls + PA220 ) are no longer connected to the panorama.

No changes are made on the network side between the two.

Panorama : VM (VMware ESXi) version 8.1.17

Firewall: 2 HA FW version 8.1.17 and PA220 8.0.17
Changing the IP address of panorama in the firewalls and re-establishing it, as well as restarting did not solve the problem.

Thanks in advanced for any Help!

Regards

Re: Panorama<->Firewalls connectivity issue

reaper — Mon, 08 Feb 2021 08:17:39 GMT

what exactly dd you change in the service route?

if you changed the service route, he first thing that can cause problems are security rules and possibly NAT being/not being applied

so look for blocked connections in your traffic log and verify if NAT is applied/not applied as expected

Re: Panorama<->Firewalls connectivity issue

ayoubAitkhouya — Fri, 12 Feb 2021 09:44:11 GMT

Hi Reaper,

Once I change the service route in the firewall and restore it to default (through management) the firewall is no longer connected to the panorama.

I still believe if I change service route to others and revert to the default, they will be disconnected from the panorama.

Best Regards,