How can we limit the Panorama XML API access ?

How can we limit the Panorama XML API access ?

How can we limit the Panorama XML API access ? We are using this XML API for Terraform and ansible automation. We want to give only access to few device group and we don't want to give access to all devi

Panorama API Log Queries limit

Hello, I am using a python code that queries logs from Panorama using API (Job is created to query the last 1000 logs--> Logs downloaded --> finish the job on panorama --> wait 10 seconds --> Repeat)

I aim to keep it running continuously for some day

Panroma using public ip

Hi,

we are using multiple paloalto firewall .To manage centrally we are using panorma .But current configuration working through site to site vpn .

Can we established the connectivity through internet .It will help us even if the site to site vpn

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors.
We are currently using Panorama in VM mode.

1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hyperviso

Error: . IPSec Tunnel IPSEC_FWNCACAL2_Tun196 Tunnel Interface tunnel.196 has no virtual-router configured.

Hi,

I'm setupping an ipsec tunnel for the first time thru Panorama. When I try to push, I got this error: . IPSec Tunnel IPSEC_FWNCACAL2_Tun196 Tunnel Interface tunnel.196 has no virtual-router configured.

I verify all setting including the tunne

Panorama Administrators API

Hello Folks,
I'm trying to integrate panorama with IGA tool for user access management. We want to create/modify/delete users in Panorama Administrators. Do we have any APIs to achieve this? With this PAN-OS REST API documentation I'm not able to find

Log Collector Redundancy

Hello,

We want to configure log redundancy. Below is our infra:

1. Two Locations, both locations is active.

2. In both locations having PA appliances in HA & Panorama VM in panorama mode.

3. Panorama HA is configured between both Panorama.

Below is

Errors when pushing template to new Palo

I have managed to do a full push of a new template to a new firewall for a migration but I am getting a few errors.

They are all related to the virtual router no being configured and one interface ae3.16 is not valid.

In my template I have the VR se

WildFire job stuck at 49% on Panorama M-200 Appliance

Panorama M-200 hung on an active job at 49%. At this writing, it is pushing an hour. 

Started the upgrade from 10.1.x to 11.1.6-h10. 

Upgrades through 10.2.0 and 11.1.0 seemed to have worked fine. 

There are a pair of M200s in HA. The other M200 fi

Panorama changes after static route added

We have added a static route to our Palo firewall through Panorama GUI and before committing the change when we compare the candidate config to running config it shows removal of some static route metrics for all static routes, even though we only ad

Panorama SD-WAN Zone Mapping? No longer needed or no longer available?

I know this has been posted in the past, but I want to check if there are some new answers before reaching out to our SE. There is a "known issue" where the zone mapping tab was removed from Panorama. The current documentation still mentions the need