Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4911 Views
  • 0 replies
  • 0 Likes

Panorama and Paloalto Firewall Communication

Dear Folks, I have firewall and Panorama in a large scale deployment. I would like to understand the process and procedure Device Certificate, As per project plan we are going to deploy Panorama first following deployment of local managed firewalls. So expedite the locally PKI signed certificate [from PKI team] for communication and integrati...

Need help in setting up a basic lab

I am a complete beginner new to Palo Alto. I have a lab setup with Palo Alto management IP 192.168.1.51 and a windows server 2022 machine with IP 192.168.1.57. I want to create a rule on Palo Alto firewall to stop the internet access to the server. The default gateway for the internet is 192.168.1.1 Tell me how to do that because when I tried ...

How to delete tags in Panorama from CLI ?

Hi all I have an issue and i need your help. I need to delete tags like "FQDN" from Panorama from the CLI. When i issue this command below i have an error message: command : delete shared tag FQDN Response : Object doesn't exis What did i miss?

Why do all my Panorama security rules have the same "Modified" date and time?

In the NGFW, under Policies > Security, there is a "Modified" field.It usually shows the date and time the Security Rule was modified.I don't see any modifications to the group objects in the security rule that would allow duplicate use.However, the same date and time "Modified" appears in the unmodified panoramic security rule. Any idea why ...

스크린샷 2024-03-22 03.36.20.png

Seconday Passive ES Health Red master_not_discovered_exception

I have two Panorama servers 11.0.1-h2 in HA. Both are in Panorama mode and have 3x Disks (2TB each). Logs are really slow to view on the Active-Primary and never load on the Secondary. When diagnosing I came across this error on the secondary: admin@Panorama2(secondary-passive)> show log-collector-es-cluster health { "error" : { "root_...

Unable to commit Panorama stack template

Hi All, When pushing Panorama stack template configuration to devices i encounter error message as per below. Verified no Masterkey was in use. Please advise. Operation Commit All Status Completed Result Failed Details Validation Error: deviceconfig -> system -> snmp-setting -> access-setting -> version ->v3 ->user -&gt...

Resolved! Panorama Management OS Compatibility

Hey all, I saw many discussions about managing Palo Alto FW with lower version than Panorama. But I wonder if my PA450 FW is at 10.1.12 and my Panorama is at 10.1.10 ,would Panorama will have any issue to manage the FW?

Can't RDP from Mac to Windows Jump Server

Dear Community Members, I'm facing a strange issue. I use 2 machines related to my work. One is a Windows Laptop and another one is a Macbook. We have a server, which acts as a Jump Box. We use Global Protect VPN for connecting to that JumpServer. Now the issues is that, i can access this server after connecting to GP from my Windows Lap...

Panorama unused policies query

I am not a programmer or developer, so forgive me if this is a stupid question. Is there a way to query Panorama to retrieve an aggregate list of unused policies across all device groups with a created date over one year old? I've looked through the API documentation and do not see anything that applies.

RolandG by L0 Member
  • 2223 Views
  • 3 replies
  • 0 Likes

API: how to iterate to get logs page by page?

I am trying to retrieve large amounts of logs from panorama via the api. The log api uses an asynchronous API. I have the initial request which includes the search criteria and returns the `jobid` working and can get the first batch of logs back (max 5000) but I can't figure out how to make subsequent calls to get the rest. The `get` reque...

R.Fulton by L0 Member
  • 1166 Views
  • 0 replies
  • 0 Likes

RESTAPI call for Dynamic Address Group members

For one of my automation use-cases I need to check what IP's are a member of a Dynamic Address Group, this list: I haven't found an API request that results in this data. I know I will be able to grab the data from cli but ssh'ing into panorama is a solution I try to avoid. Using /restapi/v10.2/Objects/AddressGroups I receive the filter as outp...

T_Hoedemaekers_0-1709225550790.png

Reboot/upgrade time approximate/estimate Panorama M-200

Reboot/upgrade time approximate/estimate Panorama M-200 Good morning, thank you for the help and collaboration as always. Question, how many hours it takes approximately to perform the following Upgrade of Panorama M-200, when the reboot is performed by the version to install: 1.- Reboot/upgrade time - M-200 PAN-OS 9.1.4 to 9.1.14-h4 ( rec...

Metgatz by L4 Transporter
  • 9658 Views
  • 6 replies
  • 0 Likes

Panorama - VM Hardware version

I have a Panorama VM that is running in production for many years now. Currently, the VM hardware version is 7 I recently switched from legacy mode to panorama mode. I had no issues during this process. However, ever since then, our backup software seems to crash Panorama. Panorama becomes unreachable and a reboot is necessary to resolve. O...

Software version Downgrade from 10.1.1 to 10.2.7 for Panorama

When trying to downgrade the PAN-OS version from 10.1.1 to 10.2.7 due to a DLP plugin validation error, we encountering the following error: Does anyone know how to resolve this issue? Failed to install 10.2.7-h3 with the following errors.SW version is 10.2.7-h3Nothing pending to cancelError: Please uninstall openconfig plugin before downgradi...

  • 853 Posts
  • 47 Subscriptions
Top Liked Authors