This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 5168 Views
  • 0 replies
  • 0 Likes

Panorama Commit Best Practices for Large Environments

Hi everyone, I'm looking for some guidance on Panorama commit workflows in larger environments. For those managing multiple device groups and templates, what has worked best for reducing commit times and avoiding unnecessary changes? Do you typically use selective commits whenever possible, or do you have another workflow that has proven reliabl...

kosarbnu by • L1 Bithead
  • 336 Views
  • 1 replies
  • 0 Likes

Verification of Panorama (HPV) Upgrade Procedure

Attention:Global TPM team,Environment:Existing Panorama HPV environmentCurrent version: 11.2.7-h2Target version: 12.1.4-h3 We received an inquiry from a customer regarding an upgrade from Panorama 11.2.7-h2 to 12.1.4-h3.First, we provided the base image Panorama-HPV-12.1.2.vhdx, followed by the base OS Panorama_pc-12.1.2 and the target version...

Migration of Panorama which has NGFW Clustering to new Panorama

This technical article provides an end-to-end workflow for migrating a Panorama management server in environments utilizing Next-Generation Firewall (NGFW) Clustering. Unlike traditional High Availability (HA), NGFW Clustering requires specific handling of the clustering plugin. Technical Prerequisites & Compatibility Software Alignment: ...

Screenshot 2026-07-29 at 1.06.32 PM.png
Screenshot 2026-07-29 at 12.54.36 PM.png
Screenshot 2026-07-29 at 12.55.50 PM.png
Screenshot 2026-07-29 at 12.58.36 PM.png
gsyed by • L2 Linker
  • 436 Views
  • 0 replies
  • 3 Likes

Best Practice for Managing Short-Lived Public Certificates with Panorama?

Hello everyone, With publicly trusted SSL/TLS certificates moving toward much shorter validity periods, I'm reviewing how we manage certificates across our Palo Alto environment and would appreciate some advice from those who have already addressed this. Our environment is managed by Panorama, and several firewalls will be using SAML authenticat...

kosarbnu by • L1 Bithead
  • 259 Views
  • 0 replies
  • 0 Likes

Resolved! Link to Panorama demo site

Hi All I have the link to the PAN Firewall demo site (https://us1.demo.paloaltonetworks.com) but have forgotten the URL link to the Panorama demonstration site, can someone please help or direct me to the correct Panorama link.

Impossible to migrate an ae interface to a different speed in Panorama?

Quite new to Panorama, but have been working with Palo Alto standalone firewalls for a little while. Client has 2 Active Passive HA FW's in Panorama and an ae1 interface with 4x 1G interfaces as members. They want to switch this to 4x of the 10G interfaces during an outage window. Am I right that I should be able to just remove the 4x 1G membe...

Resolved! Device Group "Shared" available in Policies tab but missing in Objects tab

Hi all, I've run into something confusing in Panorama and wanted to check if this is expected behavior or a bug on my end. When I go to the Policies tab, I can select Device Group: Shared from the dropdown without any issue. However, when I switch to the Objects tab and open the Device Group selector there, "Shared" is not listed at all — I can'...

MaratP by • L1 Bithead
  • 997 Views
  • 2 replies
  • 1 Likes

IDS Alerts

Hi, I have been by auditors to submit IDS log alerts from Panorama, i know the best practice is to use Microsoft Sentinel. Has anyone done directly using Panorama and which severity is selected to minimize impact on the smtp server.

GlobalProtect Logs Showing Only a Few Days of Retention on Panorama

Hello Community, We are experiencing an issue with GlobalProtect log retention on Panorama. Our Panorama manages 6 firewalls, and all firewalls are configured to forward logs to Panorama. However, on Panorama, the GlobalProtect logs for the managed firewalls are only retained for about 6 days. When we check the output of the command show sys...

Panorama Virtual Appliance on Azure – Admin Password Recovery (No SSH Key)

Hi everyone, I'm looking for guidance on how to recover admin access to a Panorama virtual appliance deployed on Microsoft Azure where the admin password has been lost. **Environment:**- Panorama Virtual Appliance on Microsoft Azure- Authentication configured with username/password only (no SSH key pair was configured at deployment time)- No o...

Improve log filtering workflow with quick “exclude / NOT filter” option from Traffic logs

Hi team, I’d like to suggest a small but impactful improvement to the Traffic Logs filtering workflow. Today, when we click on a value in a log entry (e.g. source IP, destination IP, user, etc.), it automatically adds that value to the search bar as a positive filter (e.g. eq / in). This is extremely useful and significantly speeds up building...

Can we create a custom log forwarding to syslog server for PAN OS greater then 11.0.0

In our Panorama syslog forwarding we can see logs are sent in the Default Format . We need to change it to a customized format . Default Format :<14>May 27 20:07:50 FW1 1,2026/05/27 20:07:49,016201049542,CONFIG,0,2562,2026/05/27 20:07:50,10.252.40.134,,set,ADMCREGT,Web,Succeeded, deviceconfig high-availability group,7618904982443524109,0x8...

Load various configuration onto staged firewall from panorama for a few attempts - remote install

Hi, i have a panorama connected firewall in a staging build room. I need to take it to a remote site and connect it to a Starlink connection (which is already mounted). Is it possible to push down a few different configuration options to the firewall so that when I'm in the remote location if my main config does't form a connection and I need to...

  • 736 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks