I have multiple issues with Panorama that may, or may not, be connected:-
The first few issues are frustrating but not operationally critical - the last one is a serious problem. Has anyone else seen this (all firewalls are running 5.0.9)?
Note: We do seem to be having random issues with the Palo upgrade servers - the above, updated maintenance contracts not being pulled down when trying to update licenses, other firewalls having intermittent access errors when performing normal updates etc.
- When you go to tab software under tab panorama you get error "'No Update Information Available' can you please click on Check Now link at the bottom of the Software page.
- this error might occur during software upgrades. This error does not mean there was a problem downloading the new image, but instead it indicates that there is something wrong with the current PAN-OS image. Can you please try to re-install the current PAN-OS software then attempt the upgrade again.
Please refer the following link for more information about the PAN firewalls not forwarding logs to panorama
Thanks, I will give the linked FAQ a go, however I should note that I have tried rebooting Panorama, and it is not in a HA pair. Also note that as soon as we downgrade Panorama back to v5 logging commences again immediately.
Also, for the first two points:-
1 step forward, 1 step back...
Using the commands in the highlighted FAQ I can kick Panorama logging back into life - but only using those commands i.e. issuing a log stop and start for each firewall (we've got over 40...).
If I reboot a firewall it needs manually stopping and restarting the logging to enable Panorama to receive logs; AND if I reboot Panorama it loses logging from all firewalls again immediately.
Having to roll back to 5.1.x again as logging is unworkable under those conditions.
Hey apackard -
I feel your pain with the logging issues, only, we experience the same intermittently on PanOS v5.1.6. Still haven't come up with a solution.
As for your Updates issue.. if you haven't yet resolved that, one thing that we did is changed our Update Server [Panorama -> Setup -> Services -> Update Server] to "staticupdates.paloaltonetworks.com" ... this was suggested some time ago from support.
As I hope that you've figured the issues out since this thread is almost 3 months old, I also hope that if you haven't, this is helpful.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!