Panorama connectivity issue

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Panorama connectivity issue

L0 Member

Hi everybody,

 

When I configured my new firewalls to register with my panorama, they didn't appear.

I checked the following points:
- Connectivity between my firewalls and my Panorama : OK => I do some packet captures on both side
- TCP bidirectional traffic on port 3978 : OK => I do some packet captures on both side
- Re-generate SSL certificates on my Panorama : OK => On my Panorama web gui, I see my certificate marked as valid.
- Copy-paste serial number from my firewall to my Panorama : OK
- Allow IP of my firewall on my Panorama's managment interface : OK => I configured it
- PAN-OS version on my both equipment : OK => we are in 6.1.8
- Reduce MTU size : OK => MTU = 1300 on my firewall because we pass into VPN tunnel to contact my Panorama.
- NTP synchronization : OK => Both equipments are on time.

I checked these topic:
https://live.paloaltonetworks.com/t5/Management-Articles/Troubleshooting-Panorama-Connectivity/ta-p/...
https://live.paloaltonetworks.com/t5/Management-Articles/Connectivity-Issues-with-Panorama/ta-p/5644...

 

If anyone has got this issue, I'll be happy to know the resolution.

 

Have a nice day.

 

Mikaël

1 REPLY 1

L3 Networker

can you ping panorama host from your new firewall CLI using firewall management interface IP as a source?

Not sure but you might need to adjust source routing (for Panorama) only to use management interface IP; i had simmilar issue that solved with source routing setting.

 

  • 4936 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!