This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4886 Views
  • 0 replies
  • 0 Likes

Resolved! Panorama issue after upgrading to 10.2.8-h3. Vsys not showing in interfaces and Vsys pages.

Hi i'm experiencing a cosmetic issue after upgrading panorama to 10.2.8-H3. In Interface page infos related to vsys are not showing up correctly. Also i cannot see vsys anymore in their own configuration page.All info are correct if i browse the firewall but as we manage all from panorama this bug is preventing us from modify certain settings. ...

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command? 17162 elastic+ 20 0 3923.0g 38.0g 3.3g S 5.9 15.1 168339:53 java 18242 elastic+ 20 0 3921.6g 38.0g 3.3g S 5.9 15.1 163177:55 java top - 19:19:39 up 104 days, 1:59, 1 user, load average: 3.61, 4.93, 5.40 Tasks: 662 total, 1 running, 370 sleeping,...

URGENT VPN failover help needed

Hello Everyone, We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki. The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are configured on the client's Meraki. I have to configure VPN failover on Palo Alto. Please help me out...

msdphi by • L2 Linker
  • 1042 Views
  • 1 replies
  • 0 Likes

admin role panorama unable to push

Hi guys, i need help for a stupid things but I cannot solve it. My scenario: Panorama in 11.0.4-h1 with 40 firewall connected, one for every branch of my company. What I want: the colleagues of the branch of Miami can made changes only template and device group of Miami. I created on panorama access domain with the relative devicegroup (Miami)...

Volkiria by • L0 Member
  • 701 Views
  • 0 replies
  • 0 Likes

Service Port overwrites Application default provided port (?)

Hello, I would like to get a better understanding about the relationship Service vs Application when setting up FW rules: Example: "mysql" is provided with service TCP port 3306. If a rule is created using service TCP Port 58740 and in same rule under application "mysql" is added, would it cause the PA to associate application "mysql" with port...

Martin2K by • L1 Bithead
  • 1057 Views
  • 2 replies
  • 0 Likes

CSR with more than 4 SANs

Hello, We are operating a GlobalProtect environment that uses a generic Server SSL cert with a shared common name and the certificate lists multiple subject alternate FQDN names. We are about to expand the GP Gateway numbers and need to add the SANs into a new CSR. But we see that Palo Alto only supports a limit of four (4) SANs "hostname" ...

Panorama - SDWAN Autogenerated Config Nightmare

I have spent the better part of two days deploying what should be a simple, standard SDWAN solution following the provided documentation. No matter how many times I try, every time I get to the point where I create the VPN Cluster, I get commit failures on the firewalls indicating that the tunnel.90x interfaces have no virtual router configured ...

dpayne_0-1623379725914.png
dpayne by • L1 Bithead
  • 7416 Views
  • 6 replies
  • 1 Likes

Resolved! Panorama 11.x - Recommended AWS EC2 instance

Hi, Panorama version 11.0 and above has a recommended minimum memory size of 64Gb. AWS Marketplace shows the recommended EC2 as c4.4xlarge (Vendor Recommended), which only had 30GB of memory. Based on v11 requirements, the C4.4xlarge being the recommended instance type is probably not correct. I am curious to see what instance type othe...

Panorama Device Specific Templates Network Settings

In our Panorama exists a Standard Template. In the standard template I define ethernet1/5 with several sub interfaces. At one of our locations I need to add a sub interface for vlan 88. To tackle this, I have a device specific template that is in the template stack for this location. Within that device specific template, I added ethernet1/5....

AOneR by • L1 Bithead
  • 10483 Views
  • 4 replies
  • 0 Likes

Resolved! Panorama upgrade to 10.2.11 - Incomplete log entries

After upgrading Panorama to 10.2.11, we noticed various logs are either missing text , have a unknown severity (system logs), and show an inaccurate bit count.I've tried restarting the logd process and rebooted the box.Seems like a bug but I couldn't find anything in the known issues with 10.2.11.Any help is appreciated.

Robert2 by • L1 Bithead
  • 2073 Views
  • 2 replies
  • 0 Likes

Panorama support Azure site recovery service

Hi, I have deployed single Panorama in Primary region only to manage VM-series firewall deployed in Primary and secondary region. I have a requirement that Whenever my Primary region goes down Panorama moves from Primary region to secondary region and I could manage VM-series firewall in secondary region. Is Panorama supports Azure site rec...

Avinash by • L0 Member
  • 2203 Views
  • 1 replies
  • 0 Likes

Downgrading from 11.1.2-h3 to 10.2.0.h3

I know downgrading is not recommended but for a configuration management requirement I may have to downgrade from 11.1.2-h3 to 10.2.0-h3. On a test bench unit I upgraded it up to 11.1.2-h3, and following the downgrade procedure I downgraded to 10.2 directly and then re-apply the maintenance patch for 10.2.0-h3. I When I am looking at the boot p...

Query RE: Access Domains

Hi Team, I have a requirement as a user wanted to give full access to a Device Group A and Just a read only access only for monitor to a Device Group B. Will this be possible in Panorama using Access Domain or any other method ? Panorama

Edsnow by • L3 Networker
  • 1218 Views
  • 1 replies
  • 0 Likes
  • 848 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks