This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4841 Views
  • 0 replies
  • 0 Likes

Resolved! CVE-2024-3393 - Panorama Patch

I have several panorama managed firewalls I have applied the work around and want to patch them to 10.2.10 - h12. But there is no patch for Panorama, my concern is that Panorama is supposed to be higher than the managed firewalls.

SCP Dynamic updates

Hi Community, Our setup follows the steps outlined in the Palo Alto article: Install Updates Automatically for Panorama Without an Internet Connection. Here’s the issue: The Panorama with an internet connection successfully downloads updates and uploads them to the SCP server. The Panorama without an internet connection pulls updates from the S...

Discussion on Upgrading the Log Collector

panorama and log collector version 10.2.3，the customer want to upgrade the 11.1.4 first，need upgrade the content。 the panorama and log collector connect are normal。 but when upgrade the content， Log in to the Panorama web interface. Select PanoramaDevice DeploymentDynamic Updates. Click Upload, select the update Type, Browse to the appropr...

Felixcao by • L3 Networker
  • 1614 Views
  • 2 replies
  • 0 Likes

sc3cachange logs back up success

Hello! Could you kindly let me know who can assist with this matter? sc3cachange logs back up successAlso I can only see the traffic from the CN firewall in Panorama after restarting the process management-server.

ihaciyev07_0-1734680396019.png

Panorama Commit failed to managed firewall

Hi team, I am facing a commit failed in panorama(vm) when trying to commit and push the configurations. when checked the commit failed details: i see below: > Validation Error: application-status -> huggingface 'huggingface' is not a valid reference application-status -> is invald COmmit failed

Application and Threat Updates

Hi, i have an air-gap infra, wherein a panorama vm(ha) managing firewalls. All updates are being done manually on each fws and panorama separately. In Panorama Dynamic updates>>Applications and threats>>> Filename 8923-9118 panupv2-all-apps-8923-9118 is installed. However, in firewalls panupv2-all-contents-8923-9118 is installed.W...

panorama in management only mode

we have a panorama pair in ha (vm), in management only mode. Having 3 pairs of managed firewalls wherein only configuration push is being applied. Dynamic updates for each pair of Fws is being applied manually since it is an air-gap infra (no-internet). Now, i see the panoramas were never updated with content updates, since the active one is hav...

Maximum number of addresses exceeded

Hi All, We are facing the below issue while committing and pushing the configuration to the device from Panorama. We have already "unchecked Share Unused Address and Service Objects with Devices" but still we are facing the issue Kindly help to resolve the issue. Details: . Validation Error: . address constraints failed : Maximum number ...

Moving firewalls from one collector group to another requires two push to collector groups.

Hi, I have a customer that has been using their Panorama as (local) log collector, but now they have purchased two Panoramas to be dedicated log collectors. When I move firewalls from one collector group to another - by first removing them from the old group, then adding them to new one, then commit to Panorama, then push to the collector groups...

Upgrade Panorama 11.1.0 to 11.2.x and PANOS

Hi Guy,I have 2 PA-3440 and 1 Panorama VM to manage them. My PA-3440 devices are on version 10.2.7-h8 and Panorama is on version 11.1.0I am on the way to upgrade Panorama and PA3440 devices to version 11.2.3-h5 or another latest version recommended (please recommend me), I tried using the Validate button to see the upgrade path, but I don't see ...

L.CTIN by • L1 Bithead
  • 5263 Views
  • 2 replies
  • 0 Likes

Panorama moving to LEGACY MODE

We have a Panorama in VMware ESXi, and this Panorama is in legacy mode. What are the reasons for moving to legacy mode? I know that the Panorama mode will switch to legacy mode if the resources do not meet the minimum requirements. However, when I tried creating a new Panorama with very minimum memory and CPU, it remained in mgmt-mode, while t...

AkashThangavel_0-1733733789195.png
AkashThangavel_1-1733733984977.png

Resolved! NGFW dont send logs to Panorama device

Hello Team,I had the following scenario, 1 HA NGFW pair and a Panorama device on Panorama mode on the 10.2.8-h4 pan-os version, and on the Panorama device we don't see any logs from the active NGFW. I checked the Log Forwarding profiles, Permitted IPs on the MGT's interfaces and only with the show log-collector preference-list command on the CLI...

How to Show Address Group Members - Including the IP Address of Each Address Object in The Group

Looking for CLI or Web output to show not only the name of each Address-Object member of a group but the IP address as well. I have multiple address-groups that have all named address-object members. In order to see the IP for each one I have to click the pull down for every member, looking to get a list of the members including the IP address...

FBMTRAV by • L1 Bithead
  • 9178 Views
  • 4 replies
  • 3 Likes
  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks