After removal firewall from Panorama it cannot register anymore to other Panorama instances

I had a small POC with SD-WAN on PA-410 units and Panorama in management mode.

Once it was done, configuration was deleted, and it acted just as a regular firewall, so I have decided later to remove it at all from Panorama. Just as a regular step rem

Revert specific changes made by a user in Panorama via ansible

Hi Team,
I am looking for an ansible solution to revert only specific uncommitted changes made by user in Panorama. For eg: if a user created an security policy and a nat rule, I want to revert that specific nat rule creation not the security policy.

PAN-OS Xpath

Hi all,

Is it possible to retrieve info for security profiles and policies using XPath on Panorama-managed firewalls?

As of now, I am able to retrieve this info via panorama xml api/xpath, but not through the firewall directly. 
The security policies

Suspicious VPN log in attempts - do you guys also get this?

We don't have users in Switzerland / Netherlands, but I can see consistent log in attempts from the GlobalProtect logs.

I know the true locations is masked, but this is a persistent thing, wondering if you guys also get this?

I've geo-blocked sus

incorrect determination of the geo-sign of the IP network by Palo Alto networks 31.135.232.0/22

Good afternoon. We encountered a problem. We are the owners of the network 31.135.232.0/22. In the system "Palo Alto networks" it is determined by geo-identification as Ukrainian, although in fact it belongs to a Russian Internet provider. Accordingl

Importing Shared Object Questions

I have a relatively new Panorama installation.  I want to associate 2 in production firewalls with ~1700 shared objects each.  These two are only slightly different, I could make them the exact same with a little leg work.

I associated and disassoc

Commit and Push to Devices - via API call to Panorama

Hi all,

I am trying to develop a proof-of-concept script, where our SOC will push an a shared address object to Panorama, with a tag "SOC_IDENT_HIGHRISK". These objects will then be dynamically added to a security group to which block rules are app

Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Hello team,

I have a problem with my export configuration Panorama via  scheduled task.

When I make a test SCP server connexion I have this mesage : 

Before upgrade to 10.2 the export was working fine.

I have also saw that PAN-188052 talk abou