Paloalto NGFW file system integrity check??

[JoDongWook]

hi

this is jo. from S.Korea

case(PA-3060 / PAN-OS 8.0.7)
customer want to check
'file system integrity check' when it occur.(monitor->system log)
when the integrity log occur want to send to Syslogserver.

test.
I`d reboot Pa-220 and checked system log however I cant find any integrity log.

Qustions
1, how can I find integrity log?
2. Integrity check really occur when PA on boot or after 90days?
3.do I need Panorama to check it?

I refer this Doc
https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/troubleshooting/troubleshoot-panorama-...

Thank for your help

[kiwi · Accepted solution]

Hi @JoDongWook ,

If everything is ok and the check passes, the appliance generates a System log (Monitor > System Log) of informational severity and boots successfully.  If the check detects a software corruption or possible device tampering, starting with 8.1.3, the appliance boots in to maintenance mode and you must contact Palo Alto Networks Customer Support for assistance. We’ll help you to learn more about what caused the check to fail.

As per this DOC:

PAN-OS 8.1.1 Software Integrity Check – What Happens When a Device Fails this Check?