AIOps for NGFW Discussions | Palo Alto Networks

Migrate Panorama to Strata Cloud Manager

I am curious if anyone has migrated their physical NGFWs from Panorama to Strata Cloud Manager. The docs are a bit vague, I think this is supported for configuration and maybe even SD-WAN (Pan-OS not Prisma). But the documentation is lacking on how an existing deployment may look. We are working to move to the cloud, and Panorama is a beast I...

AIOps for NGFW Best Practice Report

Hey guys, I've enabled under the free license, device telemetry for all settings but for some reason I'm not seeing the best practice report, in the display area the message 'The Best Practices report is not available for this device because it is not sending configuration file via telemetry' is shown. Anyone else had this problem? This sectio...

Resolved! Change tenant Data Region

How can I change tenant Data Region? So, no Data Region inside Device setup - Telemetry, but Data Region configured when I created my tenant?

Resolved! Delete AIOps

How can I delete AIOps for NGFW Free because i activate it with NO Support accont, and when i want to activate it from Support account calls me "SUB_SERVICE_1135 : AIOps for NGFW Free apps already exists".

Unable to Upgrade PAN OS to 9.1.13-h3 from 9.1.11-h3- Error: findfs: unable to resolve 'LABEL=sysroot0'

We are trying to upgrade the PAN-OS of PA-850 to 9.1.13-h3 from 9.1.11-h3. initially when clicking on install getting an error as "The software manager is currently in use. Please try again later". then we have run the command "debug swm unlock" in CLI. After that when trying to install get an error as "Error: findfs: unable to resolve 'LABEL...

Failure BPA on demand "Failed to generate report. Request timed-out"

Hello, With the transition of the BPA to AIOPS, I’m currently unable to do BPA on demand with my firewalls under PAN-OS 9.1 (PA-3020 and PA-3060). Indeed, after successfully loading the TSF, it stuck with this message “Processing TSF file” before to trigger a failure ("Failed to generate report. Request timed-out"). Despite, I was able to do...

Best Practices Question

Currently have the FREE version of AIOps. Noticing some anomalies with the best practices analysis (and from reading on the forums, it appears others are to). One example I have and curious if others are seeing it. In the Best Practices Dashboard looking at the Network->Network Profiles, it is identifying Ipsec Crypto Profiles and alerti...

Cant add device to aiops, says device already associated to another tenant id, but it is not an id i recocnize

Cant add device to aiops, says device already associated to another tenant id, but it is not an id i recognize the devices are greyed out

Some firewalls not appearing in AIOps free

I went through the AIOps onboarding a while ago. I see my panorama and 3 firewalls onboarded, but the remaining firewalls are missing. I've verified all firewalls have Telemetry enabled and configured for Americas. I'm running PANOS 10.1.10-h2.

ZoneProtection to intrazone /interzone

Hi all If I use from zone=any to zone=INTERNET it failed in the AIOps/BPA ZoneProtection. So I add from/to Zone to all my rules to get the % up. Still not 100% due to ZoneProtection missing in the 2 default rules. I can not figure out how to add zones/ZP to a intrazone/interzone rule. Bug?

Issues ggetting Pa tp report to the AIOPS page

i am trying to get my PA's to report to the portal and was told that I need to renew the device cert that already shows a valid cert under panorama. I was told that this will cause the connection to reset and connecct back to the portal. If I select "get certificate" It states that teh current cert will revoke and create a new one. Dont want t...

Resolved! Integration of Fw, to Aiops

Hello team: To integrate fw to Aiops, do you only need to activate telemetry in the fw and launch the application from the support portal?Isn't there any type of synchronization needed, such as by serial number of the fw or something like that? Greetings. AIOps for NGFW

Resolved! Error Loading On-Demand BPA Reports

Until a few months ago, I was able to generate the On-Demand BPA without any problems, but I went to do it today and immediately got the message "Error Loading On-Demand BPA Reports". When importing the TSF, it displays the message that it was loaded successfully, but it does not open. Everything leads me to believe it's something on the website...

Resolved! DNS Security adoption rate in 0%

Hi As per the changes in AIOps, my DNS Security is shown as 0% adoption rate, even if in the old BPA reports (from support page) has shown that we've been using the DNS Security options. In my configuration, we have sinkhole for all domains, extended packet capture for C2, following the documentation DNS, but still no success on changing it's ra...

Failed to send: file 'PA_XXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz'.

Hi Live Community, I've set up AIOps for NGFW Free in our setting. I then added 20 firewalls to the AIOps dashboard after that. This critical alert comes via email every hour. File "PA_XXXXXXXXXXXXX46_dt_10.1.6-h6_20230411_2230_1-hr-interval_HOUR.tgz" could not be sent. Does anyone know why I'm receiving this alert or have any experience wit...

Discussions

Migrate Panorama to Strata Cloud Manager