Connection between pxGrid and Panorama failed

Hi,
I am currently trying to integrate Cisco pxGrid into PAN Panorama. I am using the Trustsec Plugin 2.0.0 & PAN-OS 11.1.2-h3. I have successfully created an account in the ISE and verified it. But when I create the pxGrid Server in Panorama I see th

Cannot create auth keys

Trying to generate an auth key to setup some dedicated log collectors.

Tried in the GUI and CLI. In both instances I get the error, "Failed to add authkey. Failed to update DB."

Runing 11.0.2-h2. Any suggestions?

Panorama Logs - Storage and LPS rate

Der All, 

I have couple of queries regarding Log storage and Lps. 

I have M300 Panorama appliance with Active/Passive. I have installed the Panorama HDD with full capacity which is 16TB HDD. I am managing 400+ firewall from this Panorama. For Initi

Panorama Firewall logs

Dear All,

I currently manage two M-300 Panorama devices in Active/Standby mode, each with a full disk capacity of 4x4 TB (16 TB each). My firewall logs are forwarded to the Active Panorama. Estimated log lps  we need at least 93 TB of storage to st

Log collectors use a certificate due to expire

Dear community,

When upgrading our log collectors to 10.2.9-h1 , we noticed that collectors are using a certificate that will expire soon.

We need to know how to renew the certificate, and what happens if the certificate is not renewed or if it aut

Allow google translate URL

My PAN-OS Version is 10.2.7-h8 and use PA-820

I try to allow google translate,and block other URL(include google search、google drive...)

When I follow the link as below,but not successfully.

https://docs.paloaltonetworks.com/advanced-url-filtering/

Panorama messages.

hi.

 Any idea why panorama suddenly started sending this messages a lot 

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/clien

Software updates PA-3220

Good day,

I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulat

Commit History Check on Panorama

How can I review the committed history beyond the specified date (2024/04/25) in the Panorama Config Audit?

policy based Ikev2 site to site VPN between Cisco router and Palo Alto

we have a policy-based site-to-site VPN between cisco router and palo alto. But the tunnel goes down and doesn't come up after the IPsec lifetime is expired. And tunnel only comes up after sending traffic from cisco to palo alto and not the other way

VMware ESXi Panorama ha1 down

Hello -

I have a VMware ESXi Panorama (10.1.10-h1) active/passive pair and the ha1 port goes down several times a day every day.  This produces the following in system logs "Staying in Active state after split-brain recovery (split-brain duration: xx

Built-in External Dynamic Lists - Not showing so they can be added to shared Policy

I am currently attempting to make all of my firewals look the same from a policy perspective as possible and I would like to know if there is a way to add the

Built-in External Dynamic Lists

To the shared policy.  I understand that each firewall is u

Panorama Object in Firewall Vsys

Hi all,

We have a firewall with 3 vsys and object in shared. the object for address is around 25.000.

we was integrate the firewall into the panorama, and the object was imported to each vsys.

i found that after the import each vsys have 25.000 add