Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 5035 Views
  • 0 replies
  • 0 Likes

Panorama Commit Best Practices for Large Environments

Hi everyone, I'm looking for some guidance on Panorama commit workflows in larger environments. For those managing multiple device groups and templates, what has worked best for reducing commit times and avoiding unnecessary changes? Do you typically use selective commits whenever possible, or do you have another workflow that has proven reliabl...

kosarbnu by L1 Bithead
  • 82 Views
  • 1 replies
  • 0 Likes

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors. We are currently using Panorama in VM mode. 1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hypervisor (or Redhat KVM)? 2. If yes, does Panorama support migration from VMWare to Nutanix AHV with Nut...

Mamoudou by L2 Linker
  • 7403 Views
  • 11 replies
  • 1 Likes

Verification of Panorama (HPV) Upgrade Procedure

Attention:Global TPM team,Environment:Existing Panorama HPV environmentCurrent version: 11.2.7-h2Target version: 12.1.4-h3 We received an inquiry from a customer regarding an upgrade from Panorama 11.2.7-h2 to 12.1.4-h3.First, we provided the base image Panorama-HPV-12.1.2.vhdx, followed by the base OS Panorama_pc-12.1.2 and the target version...

Migration of Panorama which has NGFW Clustering to new Panorama

This technical article provides an end-to-end workflow for migrating a Panorama management server in environments utilizing Next-Generation Firewall (NGFW) Clustering. Unlike traditional High Availability (HA), NGFW Clustering requires specific handling of the clustering plugin. Technical Prerequisites & Compatibility Software Alignment: ...

Screenshot 2026-07-29 at 1.06.32 PM.png
Screenshot 2026-07-29 at 12.54.36 PM.png
Screenshot 2026-07-29 at 12.55.50 PM.png
Screenshot 2026-07-29 at 12.58.36 PM.png
gsyed by L2 Linker
  • 170 Views
  • 0 replies
  • 3 Likes

Best Practice for Managing Short-Lived Public Certificates with Panorama?

Hello everyone, With publicly trusted SSL/TLS certificates moving toward much shorter validity periods, I'm reviewing how we manage certificates across our Palo Alto environment and would appreciate some advice from those who have already addressed this. Our environment is managed by Panorama, and several firewalls will be using SAML authenticat...

kosarbnu by L1 Bithead
  • 87 Views
  • 0 replies
  • 0 Likes

Resolved! Link to Panorama demo site

Hi All I have the link to the PAN Firewall demo site (https://us1.demo.paloaltonetworks.com) but have forgotten the URL link to the Panorama demonstration site, can someone please help or direct me to the correct Panorama link.

Impossible to migrate an ae interface to a different speed in Panorama?

Quite new to Panorama, but have been working with Palo Alto standalone firewalls for a little while. Client has 2 Active Passive HA FW's in Panorama and an ae1 interface with 4x 1G interfaces as members. They want to switch this to 4x of the 10G interfaces during an outage window. Am I right that I should be able to just remove the 4x 1G membe...

Best Practice for Managing Short-Lived Public Certificates on Panorama-Managed Firewalls?

Hi everyone, With the industry moving toward shorter validity periods for publicly issued SSL/TLS certificates, I'm trying to plan ahead for certificate management on our Palo Alto firewalls. We have several firewalls that are managed through Panorama, and some of them will also be using SAML for authentication. Since public certificates will ne...

kosarbnu by L1 Bithead
  • 120 Views
  • 0 replies
  • 0 Likes

Resolved! Device Group "Shared" available in Policies tab but missing in Objects tab

Hi all, I've run into something confusing in Panorama and wanted to check if this is expected behavior or a bug on my end. When I go to the Policies tab, I can select Device Group: Shared from the dropdown without any issue. However, when I switch to the Objects tab and open the Device Group selector there, "Shared" is not listed at all — I can'...

MaratP by L1 Bithead
  • 481 Views
  • 3 replies
  • 1 Likes

IDS Alerts

Hi, I have been by auditors to submit IDS log alerts from Panorama, i know the best practice is to use Microsoft Sentinel. Has anyone done directly using Panorama and which severity is selected to minimize impact on the smtp server.

GlobalProtect Logs Showing Only a Few Days of Retention on Panorama

Hello Community, We are experiencing an issue with GlobalProtect log retention on Panorama. Our Panorama manages 6 firewalls, and all firewalls are configured to forward logs to Panorama. However, on Panorama, the GlobalProtect logs for the managed firewalls are only retained for about 6 days. When we check the output of the command show sys...

Panorama Virtual Appliance on Azure – Admin Password Recovery (No SSH Key)

Hi everyone, I'm looking for guidance on how to recover admin access to a Panorama virtual appliance deployed on Microsoft Azure where the admin password has been lost. **Environment:**- Panorama Virtual Appliance on Microsoft Azure- Authentication configured with username/password only (no SSH key pair was configured at deployment time)- No o...

Improve log filtering workflow with quick “exclude / NOT filter” option from Traffic logs

Hi team, I’d like to suggest a small but impactful improvement to the Traffic Logs filtering workflow. Today, when we click on a value in a log entry (e.g. source IP, destination IP, user, etc.), it automatically adds that value to the search bar as a positive filter (e.g. eq / in). This is extremely useful and significantly speeds up building...

  • 726 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Authors
Labels