forward logs to panorama without managing or on-boarding firewalls in panorama

[Sajjadazamkhan]

I am looking for the best solution on forwarding taffic and audit logs to a Panorama without registering the firewalls in panorama. The goal is that Panorama should not manage those firewalls as they are in lab environment but would collect logs only. Please let me know if you have done something similar.

[Raido_Rattameister]

You don't have to manage firewall from Panorama.

Add firewall to Panorama and configure log profile to send logs to Panorama but you can keep on adding rules and configuration changes directly on the firewall.

[pulukas · Accepted solution]

I had used Panorama this way initially on a deploy.  Adding the firewalls with centralized logs and keeping all configuration local without using groups or templates.

Panorama also gives you the interface to access the local GUI directly from Panorama so you don't have to leave to make the local changes either.

We then migrated slowly a firewall at a time to using groups and templates.