Inconsistencies in Panorama?

[andrew.coons@optiv.com]

Whether I am viewing the Security rules in Panorama or from the 2050, I noticed that the Security rules are listed on both the firewall and in Panorama.  However, this is not he same for the Policy Based Forwarding rules. The Policy Based Forwarding rules are only seen from the 2050 and not from Panorama. Why is this so?

[rmonvon · Accepted solution]

Hi...Maybe the PBF rules are defined on the device and not on Panorama.  If you login to the PA device,can you click on the PBF rule and make changes?  If yes, the rule is defined locally on the device itself and does not appear on Panorama.

Thanks.

[jseals]

Hi Andrew,

If you mean to say that you are unable to add/delete/edit any of the PBF rules from Panorama, this could indicate the Administrator that is logged into to Panorama doesn't have the correct roles to edit the PBF rules.

If you've just upgraded and are using an administrator without superuser access, this is probably the case.

You'll need to login as superuser, or another account that can change your admin roles, goto the Panorama tab -> goto the Admin Roles option on the left -> click whatever role is assigned to you, and ensure that under the Policies section, Policy Based Fowarding has a green checkmark next to it.

Let us know if this helps.

Thanks,

Jason Seals

[andrew.coons@optiv.com]

Thank you both rmonvon and jseals for the reply. As it turns out, the issue was because the PBF rules were created locally at the PA2050, and not from Panorama.

Thanks again!