Software status in GUI show blank, null and unknown on Passive panorama

HI ,

we just recently upgrade our panorama VM active and passive to 11.1.4-h1 version and upgrade successfully

However, we found it weird that on secondary panorama , software status showing blank, null and unknown on the installed version as sho

Panorama Certificate Import Api Does not work when targeting a Vsys

See attached document.  When using the API in Panorama and trying to target a vsys, it always imports to the shared location.  The documentation says it supports this.  Here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api/pan-os-

Syslog Sending From panorama

HI

I have a question.
If panorama sends syslog to the syslog server, is it only the panorama syslog that is sent or all the logs of the local palo devices managed by panorama?

Thanks & Regards.

Panorama

New firewall refreshment to a new model and introduce to Panorama

We have Panorama which manage several firewalls. One of it is PA-3020 and we would like to do a refreshment with PA-440. 
In the current Panorama, there is already device group and template reference to the PA-3020. 
My question, what is the best way t

API/CLI - how to access subset of devices by tag assigned to them?

Hi there, 
I'm going to use device's tags to have another dimension beside of template/device groups. 
I've assigned a tag to subset of devices (using Panorama>Managed devices WebUI), but I'm really lost how I can get access/filter devices by this tag

Removal of Targets from Policy

I have a number of firewalls managed in Panorama that are to be decommissioned.

Some of these firewalls are in Device Groups with several thousand policy entries.  Annoyingly they have been assigned the firewalls in the target column.

Does anyone

Cloud NGFW I Cloud NGFW Integration with Panorama

We have deployed a cloud NGFW in azure using azure portal rule stack. The device is in production.

Now the requirement is to integrate this with panorama.

When we go to the device in Azure portal under security policy the options are greyed out. 

I

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

URGENT VPN failover help needed

Hello Everyone,

We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki.

The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are con

admin role panorama unable to push

Hi guys,

i need help for a stupid things but I cannot solve it.

My scenario: Panorama in 11.0.4-h1 with 40 firewall connected, one for every branch of my company.

What I want: the colleagues of the branch of Miami can made changes only template and d

Service Port overwrites Application default provided port (?)

Hello,

I would like to get a better understanding about the relationship Service vs Application when setting up FW rules:

Example:

"mysql" is provided with service TCP port 3306. 

If a rule is created using service TCP Port 58740 and in same rule und

CSR with more than 4 SANs

Hello,

We are operating a GlobalProtect environment that uses a generic Server SSL cert with a shared common name and the certificate lists multiple subject alternate FQDN names.

We are about to expand the GP Gateway numbers and need to add the S

Panorama - SDWAN Autogenerated Config Nightmare

I have spent the better part of two days deploying what should be a simple, standard SDWAN solution following the provided documentation. No matter how many times I try, every time I get to the point where I create the VPN Cluster, I get commit failu