Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors.
We are currently using Panorama in VM mode.

1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hyperviso

Error: . IPSec Tunnel IPSEC_FWNCACAL2_Tun196 Tunnel Interface tunnel.196 has no virtual-router configured.

Hi,

I'm setupping an ipsec tunnel for the first time thru Panorama. When I try to push, I got this error: . IPSec Tunnel IPSEC_FWNCACAL2_Tun196 Tunnel Interface tunnel.196 has no virtual-router configured.

I verify all setting including the tunne

Panorama Administrators API

Hello Folks,
I'm trying to integrate panorama with IGA tool for user access management. We want to create/modify/delete users in Panorama Administrators. Do we have any APIs to achieve this? With this PAN-OS REST API documentation I'm not able to find

Log Collector Redundancy

Hello,

We want to configure log redundancy. Below is our infra:

1. Two Locations, both locations is active.

2. In both locations having PA appliances in HA & Panorama VM in panorama mode.

3. Panorama HA is configured between both Panorama.

Below is

Errors when pushing template to new Palo

I have managed to do a full push of a new template to a new firewall for a migration but I am getting a few errors.

They are all related to the virtual router no being configured and one interface ae3.16 is not valid.

In my template I have the VR se

WildFire job stuck at 49% on Panorama M-200 Appliance

Panorama M-200 hung on an active job at 49%. At this writing, it is pushing an hour. 

Started the upgrade from 10.1.x to 11.1.6-h10. 

Upgrades through 10.2.0 and 11.1.0 seemed to have worked fine. 

There are a pair of M200s in HA. The other M200 fi

Panorama changes after static route added

We have added a static route to our Palo firewall through Panorama GUI and before committing the change when we compare the candidate config to running config it shows removal of some static route metrics for all static routes, even though we only ad

Panorama SD-WAN Zone Mapping? No longer needed or no longer available?

I know this has been posted in the past, but I want to check if there are some new answers before reaching out to our SE. There is a "known issue" where the zone mapping tab was removed from Panorama. The current documentation still mentions the need

Panorama REST API Discrepancy

Hi folks!

I've got a pet project to automate the provisioning of our new site firewall templates via the Pano REST API. While doing some cursory looking, I noticed that there's no endpoint in the v11.1 API docs to interact with ethernet interfaces. I

Can I Decrypt OpenVPN

Hello, 

I want to decrypt traffic to my OpenVPN server so I can perform URL filtering and IPS checks on users connecting to it. I have the OpenVPN server's CA certificate and key. Do you have any idea ?

API Script to Retrieve Logs Over a Specific Period from Panorama (Beyond nlogs=5000 Limit)

Hello everyone,

I am currently trying to retrieve traffic logs from Panorama over a defined time range using the API. However, we are running into the known limitation of the nlogs parameter, which caps at 5000 entries.

Has anyone already implemented

push from panorama to PA firewalal failed because of " is already in use because of policy and NAT already in use)

Hi,

We have panorama in 9.1.9 version and  PA-220 in same version.

we imported configuration from pa to panorama, added just e pôlicy rule and pushed again the template and device group to same firewall. 

but then we get always pushh failed with errors