General Topics

Resolved! Can 'admin' account be deleted?

1) We have several PA-3020's running 6.0.1 in our organization with only a few admin user accounts which integrated with AD, so audit wants to know if we can delete the generic accounts like "admin" or "panorama"? Any negative implications to doing so?2) We get a different list of users acccounts depending upon whether we use WebUI or CLI. T...

Sending Before Change and After Change details in Panorama to Syslog

I've been testing the logging of change events to a syslog server from Panorama. Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed. Looking in Panorama in the Monitor tab I can see the change event and some details that are sent to syslog, but the deta...

Resolved! Commit failed - failed to send phase 1 to client logrcvr

Hello,Since this morning I'm not able to commit any change from my panorama to my firewallsHere is the message error that I receive:Details:. Management server failed to send phase 1 to client logrcvr. Management server failed to send phase 1 abort to client logrcvr. Commit failedI tried some debug command like "debug software restart log-receiv...

Config (XML) import to device, using Panorama

, XMLDear all,The Panorama feature "Scheduled Config Export" is a great way to backup all device configs to a central backup repository.I known one can import this XML config from the device itself,But would there also be a way to import the complete XML files to respective device USING panorama?Thanks,Wim

Resolved! Sort columns in Monitor tab?

I feel like an idiot, but how do I sort the columns in my monitor tab? The used to be sorted by generate time, but that doesn't seem to be the case anymore.

Resolved! Export traffic log form Panorama via CLI

Hi,We're using Panorama 5.0.x for collecting traffic log (which store the log at NFS Server), which I would search (or export) some old logs (around a year before).I get time out via WebGUI, and tried scp but it only return the log headersscp export log traffic max-log-count 1048576 end-time equal 2013/10/10@04:45:00 start-time equal 2013/10/10@...

Resolved! How do I add disk space to Panorama?

We have had Panorama running but we want to add disk space to it. We have added the disk space to the VM but how do I actually get Panorama to recognize it? version 4.1.6

Resolved! Aboute ACE exam and about the trainings!

Guys, I wanna to take an ACE exam and should to attand to the training courses. i've been told to attaend to the firewall configuration essentials Firewall Configuration Essentials 101 PAN-OS v.6.0 RevC training course, but i noticed also the follwoing training course Firewall Configuration Essentials 105 for PAN-OS 6.0 RevB. Does anybody know t...

mgmtsrvr - virtual memory limit exceeded, restarting

Has anyone seen this before? I'm looking for feedback on whether or not this is directly related to the VM Panorama sits on? This was the decription of an alert I received at 12:30EST today. Sure enough, Pano was rebooting. Any information provided is greatly appreciated!Thanks,Erich

Logging events from Panorama to SIEM?

What methods are available for sending events from a distributed palo alto deployment which have been aggregated in panorama...to a syslog server or SIEM product? I know how to send events directly from a firewall but would hate for all my remote locations to have to send the logs twice, once to panorama and a second time to the SIEM.In panoram...

High Availability - Interfaces Passive Firewall are power off (down)

Hi, I have a firewll PA-3050 version 5.0.11 and the High Availability cluster is configured Active / Passive mode. The interfaces to backup firewall are powered off and I tried switch the configuration in Active / Passive to auto instead shutdown, but the interfaces still powered off .Can you help me ? How I can power on the interfaces in backup...

NTP sync failing after PAN-OS 7.0 upgrade

I upgraded Panorama to 7.0 and then 7.0.1 recently and it seems to have broken my ntp synchronization in Panorama. Now I get "NTP sync to server x.x.x.x failed, authentication type none". If I run a "show ntp":NTP state: NTP not synched, using local clock NTP server: x.x.x.x status: rejected reachable: no authenticatio...

Resolved! How to make App-ID migration with a configuration splitted between Panorama and Firewall

I have a customer installation with addresses and services defined in the Panorama as shared objects. On the other side, all rules (using those objects) are define as local policy on the firewall. When I import panorama config in migration tool I see all objects. But when I import firewall configuration, policies display addresses and addresses ...

Resolved! Firewalls accessing Panorama: best practice

Hi, I'm looking for a best practice when deploying Panorama accross multiple sites that do not really have any interconnections (and have quite a few overlapping subnets). From what I understand, the firewalls themselves initiate the connection towards the Panorama instance (VM appliance in this case). The VM instance has one ethernet link. ...

Only correlated events with "critical" severity shows up in Panorama.

Hi All, I tried to look up for this info, but didn't get much help. Not all "correlated events" are showing up in Panorama, If I change my context to the individual firewall I can see all correlated events. But the only ones that appear to forward to panorama are the ones flagged as "critical" severity. Also based off my reserach, I do see ...