Panorama and PANOS RADIUS Authentication Failing after upgrade to 10.2

Hello, 

Thought I would pass on this solution I found.  After upgrading our Panorama from 10.1 to 10.2, our RADIUS authentication no longer worked.  The root cause was our Microsoft RADIUS server was using TLS 1.0 for the PEAP-MSCHAP TLS handshake an

Forwarding system logs to log collector

Hello,

Currently we have firewall sending Threat and TRAFFIC log types with CEF format to Sentinel workspace through Linux log collector with omsagent.

We need to send the System log types as well from the firewall to the log collector and then in

How can I provde M-200 System drive is normal

Dear Community,

The customer has an SSD LED that is blue and flashing. And the document only provides HHD status was bule and have not any information about SSD.

Cause I cannot find any documents to provide M-200 System device (SSD) is in normal

Getting system alert-high for Wildfire update failure, failed to extract file

This is occurring on our Panorama.  Content of email alert is:

Type: SYSTEM
Subtype: general
Time: Apr 07 2022 00:12:55 GMT
Severity: high
Details: "Failed to extract file panupv3-all-wildfire-652605-655839.tgz with sha256: 647eedc7698709983f5e9d99dc0428

SAML for external admin, local admin for internal admin

Hi, been racking my brain trying to figure this one out.

Essentially, to comply with regional guidelines for our client, we are enforcing MFA for all administrative accounts on the Palo Altos, which are internet facing. 

I have implemented SAML authe

Log Collector is error after upgrade OS version from 11.0.4-h2 to 11.1.x

I have an issue with Log collector ( local on Panorama server) after I upgrade OS version from 11.0.4-h2 to 11.1.2-h3 (and 11.1.2-h4) . The es on Log collector show status as “not running”.

- On active Panorama server:

+ See the Log collector ( local

Connection between pxGrid and Panorama failed

Hi,
I am currently trying to integrate Cisco pxGrid into PAN Panorama. I am using the Trustsec Plugin 2.0.0 & PAN-OS 11.1.2-h3. I have successfully created an account in the ISE and verified it. But when I create the pxGrid Server in Panorama I see th

Cannot create auth keys

Trying to generate an auth key to setup some dedicated log collectors.

Tried in the GUI and CLI. In both instances I get the error, "Failed to add authkey. Failed to update DB."

Runing 11.0.2-h2. Any suggestions?

Panorama Logs - Storage and LPS rate

Der All, 

I have couple of queries regarding Log storage and Lps. 

I have M300 Panorama appliance with Active/Passive. I have installed the Panorama HDD with full capacity which is 16TB HDD. I am managing 400+ firewall from this Panorama. For Initi

Panorama Firewall logs

Dear All,

I currently manage two M-300 Panorama devices in Active/Standby mode, each with a full disk capacity of 4x4 TB (16 TB each). My firewall logs are forwarded to the Active Panorama. Estimated log lps  we need at least 93 TB of storage to st

Log collectors use a certificate due to expire

Dear community,

When upgrading our log collectors to 10.2.9-h1 , we noticed that collectors are using a certificate that will expire soon.

We need to know how to renew the certificate, and what happens if the certificate is not renewed or if it aut

Allow google translate URL

My PAN-OS Version is 10.2.7-h8 and use PA-820

I try to allow google translate,and block other URL(include google search、google drive...)

When I follow the link as below,but not successfully.

https://docs.paloaltonetworks.com/advanced-url-filtering/

Panorama messages.

hi.

 Any idea why panorama suddenly started sending this messages a lot 

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/clien