Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 5073 Views
  • 0 replies
  • 0 Likes

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors. We are currently using Panorama in VM mode. 1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hypervisor (or Redhat KVM)? 2. If yes, does Panorama support migration from VMWare to Nutanix AHV with Nut...

Mamoudou by L2 Linker
  • 7701 Views
  • 12 replies
  • 1 Likes

Panorama 11.2.3-h3 VMware Tools running but guest heartbeat remains red

Hello, We deployed a new Panorama virtual appliance from the official VMware OVA. The appliance is running PAN-OS 11.2.3-h3 on VMware vSphere/ESXi 7.0 Update 3. Panorama itself operates normally, and all management-plane processes are running. However, VMware reports that the guest heartbeat is continuously red, even though VMware Tools are show...

what is the difference between "commit to panorama" and "save changes"?

I do see commit and config options in Panorama. I am aware that commit option is used to push configuration to Panorama and then to Managed firewalls. I would like to know when to use "save changes" and what is it for under config options.if possible , Please also explain about Lock option. Lock option is used to lock commit when multiple users ...

perumalj by L2 Linker
  • 4073 Views
  • 2 replies
  • 0 Likes

Resolved! My Panorama account is locked. Is there any way to fix this?

Hello Team, There are two saved configurations: one before the password expired and one after. The Panorama is currently factory reset, and the session disconnected immediately after inserting the pre-expiration configuration. No commit was performed at that time. Is there another way to handle this? Thank you, Best Regards.

Panorama Commit Best Practices for Large Environments

Hi everyone, I'm looking for some guidance on Panorama commit workflows in larger environments. For those managing multiple device groups and templates, what has worked best for reducing commit times and avoiding unnecessary changes? Do you typically use selective commits whenever possible, or do you have another workflow that has proven reliabl...

kosarbnu by L1 Bithead
  • 164 Views
  • 1 replies
  • 0 Likes

Verification of Panorama (HPV) Upgrade Procedure

Attention:Global TPM team,Environment:Existing Panorama HPV environmentCurrent version: 11.2.7-h2Target version: 12.1.4-h3 We received an inquiry from a customer regarding an upgrade from Panorama 11.2.7-h2 to 12.1.4-h3.First, we provided the base image Panorama-HPV-12.1.2.vhdx, followed by the base OS Panorama_pc-12.1.2 and the target version...

Migration of Panorama which has NGFW Clustering to new Panorama

This technical article provides an end-to-end workflow for migrating a Panorama management server in environments utilizing Next-Generation Firewall (NGFW) Clustering. Unlike traditional High Availability (HA), NGFW Clustering requires specific handling of the clustering plugin. Technical Prerequisites & Compatibility Software Alignment: ...

Screenshot 2026-07-29 at 1.06.32 PM.png
Screenshot 2026-07-29 at 12.54.36 PM.png
Screenshot 2026-07-29 at 12.55.50 PM.png
Screenshot 2026-07-29 at 12.58.36 PM.png
gsyed by L2 Linker
  • 276 Views
  • 0 replies
  • 3 Likes

Best Practice for Managing Short-Lived Public Certificates with Panorama?

Hello everyone, With publicly trusted SSL/TLS certificates moving toward much shorter validity periods, I'm reviewing how we manage certificates across our Palo Alto environment and would appreciate some advice from those who have already addressed this. Our environment is managed by Panorama, and several firewalls will be using SAML authenticat...

kosarbnu by L1 Bithead
  • 138 Views
  • 0 replies
  • 0 Likes

Resolved! Link to Panorama demo site

Hi All I have the link to the PAN Firewall demo site (https://us1.demo.paloaltonetworks.com) but have forgotten the URL link to the Panorama demonstration site, can someone please help or direct me to the correct Panorama link.

Impossible to migrate an ae interface to a different speed in Panorama?

Quite new to Panorama, but have been working with Palo Alto standalone firewalls for a little while. Client has 2 Active Passive HA FW's in Panorama and an ae1 interface with 4x 1G interfaces as members. They want to switch this to 4x of the 10G interfaces during an outage window. Am I right that I should be able to just remove the 4x 1G membe...

Best Practice for Managing Short-Lived Public Certificates on Panorama-Managed Firewalls?

Hi everyone, With the industry moving toward shorter validity periods for publicly issued SSL/TLS certificates, I'm trying to plan ahead for certificate management on our Palo Alto firewalls. We have several firewalls that are managed through Panorama, and some of them will also be using SAML for authentication. Since public certificates will ne...

kosarbnu by L1 Bithead
  • 169 Views
  • 0 replies
  • 0 Likes

Resolved! Device Group "Shared" available in Policies tab but missing in Objects tab

Hi all, I've run into something confusing in Panorama and wanted to check if this is expected behavior or a bug on my end. When I go to the Policies tab, I can select Device Group: Shared from the dropdown without any issue. However, when I switch to the Objects tab and open the Device Group selector there, "Shared" is not listed at all — I can'...

MaratP by L1 Bithead
  • 612 Views
  • 2 replies
  • 1 Likes

IDS Alerts

Hi, I have been by auditors to submit IDS log alerts from Panorama, i know the best practice is to use Microsoft Sentinel. Has anyone done directly using Panorama and which severity is selected to minimize impact on the smtp server.

  • 728 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Authors
Labels