Panorama Log Collector Device Replacement

[prashanth_r]

Hi There,

  One of the cluster's PA firewalls was faulty and replaced with the RMA unit. In the environment, we have a Panorama setup as a log collector. As the policy packages are not managed in Panorama, is modifying the faulty device serial number sufficient?

I hope I need only to perform the below steps.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CljGCAS

Thanks in Advance

[PavelK]

Hello @prashanth_r

thanks for posting.

Since you do not manage configuration from Panorama the entire process is limited to KB you mentioned with SN replacement and do not forget to commit and push configuration to log collector. Without pushing it to log collector group you will not be able to see logs from Firewall.

Kind Regards

Pavel

[prashanth_r]

Thank you for the reply.
Indeed I found something on the Panorama side where the mode was not collector but rather is Panorama.
But I don't see the firewall policies in Panorama. Is there any way I can confirm the firewall policies are not managed by Panorama at all?

Thank You

[PavelK]

Hello @prashanth_r

thank you for reply.

If you navigate in Panorama to the top right, you will see "Global Find": 

After you paste there Firewall's Serial Number and press enter you will get a list of configurations where Panorama configuration is used for that Firewall:

Kind Regards

Pavel