Panorama messages.

hi.

 Any idea why panorama suddenly started sending this messages a lot 

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/clien

Software updates PA-3220

Good day,

I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulat

Commit History Check on Panorama

How can I review the committed history beyond the specified date (2024/04/25) in the Panorama Config Audit?

policy based Ikev2 site to site VPN between Cisco router and Palo Alto

we have a policy-based site-to-site VPN between cisco router and palo alto. But the tunnel goes down and doesn't come up after the IPsec lifetime is expired. And tunnel only comes up after sending traffic from cisco to palo alto and not the other way

VMware ESXi Panorama ha1 down

Hello -

I have a VMware ESXi Panorama (10.1.10-h1) active/passive pair and the ha1 port goes down several times a day every day.  This produces the following in system logs "Staying in Active state after split-brain recovery (split-brain duration: xx

Built-in External Dynamic Lists - Not showing so they can be added to shared Policy

I am currently attempting to make all of my firewals look the same from a policy perspective as possible and I would like to know if there is a way to add the

Built-in External Dynamic Lists

To the shared policy.  I understand that each firewall is u

Panorama Object in Firewall Vsys

Hi all,

We have a firewall with 3 vsys and object in shared. the object for address is around 25.000.

we was integrate the firewall into the panorama, and the object was imported to each vsys.

i found that after the import each vsys have 25.000 add

Panorama

Hello I was looking for the REST API's for EDL in panorama, I could only able to find for the create EDL that too for IP only (https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/pan-os-xml-api-use-cases/enforce-policy-using-external-dyn

Syslog in Panorama Policy

Hi All,

We have multiple firewalls managed by Panorama. We have single Template managing these firewalls.

There are local Syslog configs done on each firewall as logs is being pushed on different ports. But now we have multiple rules configured in Pa

Panorama need SD-WAN license individually

We have PA -1410 and PA-445 firewalls. Each firewalls have Sd-Wan license . do we require Panorama separate sd-wan license? All device will connect to panorama.

Failed migration to Panorama 10.1.3

I had an issue recently when attempting to migrate a 3250 HA pair (10.0.8-h4) to Panorama 10.1.3.  I was able to complete the push and commit however anything that uses a password or secret such as a IKE Gateway pre-shared key didn't work.  The resul

New Superuser getting blank page in Panorama Administrators tab

Hi everyone, I wonder if you can help.

Our customer created a new user account (Superuser with MFA authentication enabled), same as other users with admin role but in these cases without MFA configured.

The issue we have is that - unlike other users

GP -> SAML -> EntraID Windows users vs Mac user experience issues

Got a weird one and I'm on Mac so short of pestering my colleagues reaching out to the greater community while I wait on support to attempt to triage.

GP client 6.2.3 - PAN 11.1.2

GP setup;

• using default browser to support our yubikey users
• using

Help finding partial config diff API

I'm working on an integration to segment access to the Panorama feature to review audit comment messages and partial config diffs for policies.  In Panorama, if you navigate to Policies -> <select a policy> -> Audit Comment Archive, there are three p