Device Telemetry can't be removed/disabled from Panorama and/or local

[mattlede]

We currently have difficulties to remove the Device Telemetry options in any way. it seems as this Options doesn't work as expected. This issue persisted across several Versions of PanOS / Panorama 

Panorama 10.2.2-h2

- When trying to remove the device telemetry options from the template stack the settings are still checked and a commit & push doesn't change any settings on the firewall itself PA-3250.

- PA-220 in a active/passive Cluster with PanOS 10.2.2 can't disable the settings either.

Are there any other Options/Ideas on how to remove the welcome banners like

Kind Regards

[fgraziosip4]

I have opened a case with PaloAlto and I want to see what their fix is.

I am running 10.2.1 and 10.2.2 on my firewalls.

[ElliotM]

I have the exact same issue, i have also tried to disable telemetry via the CLI however it is still enabled. 

[fgraziosip4]

Well I have a case open and if they have a fix, I will publish it. 

Got to say lately the PanOS has not been as solid as was in the past. Perhaps was just my experience but 10.1 was ok for my firewalls and Panorama but when I went to 10.2.2 I had issues with Panorama and firewalls. 

[ElliotM]

@fgraziosip4  i agree, i would even say its generally been worse since 9.1 !

If you do get a fix please let us know.

[fgraziosip4]

I do not have a fix but I reported the issue on a case and showed the engineer  (zoom call) what happens if you disable via UI.

He has all the details and should be reported as bug.

9.1 is the old UI, definitely 10 is prettier, but it has his costs. I guess this is one of them. 

I am waiting for a patch for panorama to fix the config export bug.

[TCBenedetto]

Running 10.2.2-h2 and see this exact same issue.  Every time you context switch or log directly into the firewall you get prompted to turn on telemetry. 

Speaking of context switching I have noticed when I switch from Panorama to a firewall, I no longer have the option to switch to another firewall and can only switch back to Panorama.  Removal of the other Panorama controlled firewalls causes unnecessary step of an additional context switch.  Anyone else seen this issue?  

[fgraziosip4]

Hi Guys, 

I do not have news on the case about telemetry as still with Pan techsupport.

I do not use the switching from Panorama, I just go directly to the firewall. i suppose different way of working. Also, I am impatience and would rather go directly as it seems quicker. 

Fra

[sebblondeau]

Hi, I have the same issue... Do you have any news from support?

[ElliotM]

seems this is resolved in PanOS 11.0:

PAN-202535

Fixed an issue where the Device Telemetry configuration for a region was unable to be set or edited via the web interface.

[jkvalk]

Pls just gimme a sanity check here. PAN-202535 is not listed anywhere else than in 11.0 release notes, right? I'm not seeing it as known issue under 10.2.0. Is the issue tracking system really _so_ bad? I mean despite it not even resembling an actual issue tracking system, they would not even care to keep known-issues lists somewhat accurate?

[Steph01]

any update on this? 

[ElliotM]

Hi,

I can see this in the 'addressed issues' section for PANos 11.0.

I agree Palo Alto are poor at tracking bugs. Known issues are not published most of the time!

[ElliotM]

Its fixed in PANos 11.0 i assume other versions will not get the fix!

[fgraziosip4]

Hi Guys,

I spoke to support and this has been addressed on v11.0 and 10.2.4. 10.2.4 would be released in March (hopefully) while v11 is out. I have not upgraded to v11 and I will wait a while prior to moving into it. It seems that since v10 (UI upgrade) things are not as sturdy as before.