Panorama unused policies query

I am not a programmer or developer, so forgive me if this is a stupid question. Is there a way to query Panorama to retrieve an aggregate list of unused policies across all device groups with a created date over one year old? I've looked through the API documentation and do not see anything that applies.

API: how to iterate to get logs page by page?

I am trying to retrieve large amounts of logs from panorama via the api. The log api uses an asynchronous API. I have the initial request which includes the search criteria and returns the `jobid` working and can get the first batch of logs back (max 5000) but I can't figure out how to make subsequent calls to get the rest. The `get` reque...

RESTAPI call for Dynamic Address Group members

For one of my automation use-cases I need to check what IP's are a member of a Dynamic Address Group, this list: I haven't found an API request that results in this data. I know I will be able to grab the data from cli but ssh'ing into panorama is a solution I try to avoid. Using /restapi/v10.2/Objects/AddressGroups I receive the filter as outp...

Reboot/upgrade time approximate/estimate Panorama M-200

Reboot/upgrade time approximate/estimate Panorama M-200 Good morning, thank you for the help and collaboration as always. Question, how many hours it takes approximately to perform the following Upgrade of Panorama M-200, when the reboot is performed by the version to install: 1.- Reboot/upgrade time - M-200 PAN-OS 9.1.4 to 9.1.14-h4 ( rec...

Panorama - VM Hardware version

I have a Panorama VM that is running in production for many years now. Currently, the VM hardware version is 7 I recently switched from legacy mode to panorama mode. I had no issues during this process. However, ever since then, our backup software seems to crash Panorama. Panorama becomes unreachable and a reboot is necessary to resolve. O...

Software version Downgrade from 10.1.1 to 10.2.7 for Panorama

When trying to downgrade the PAN-OS version from 10.1.1 to 10.2.7 due to a DLP plugin validation error, we encountering the following error: Does anyone know how to resolve this issue? Failed to install 10.2.7-h3 with the following errors.SW version is 10.2.7-h3Nothing pending to cancelError: Please uninstall openconfig plugin before downgradi...

Hidden Administrator accounts in Panorama

Hello everyone, I just wanted to commit some changes to our panorama configuration and noticed, that a new user with the name "__vm_series" was added in the commit changes as a full panorama-admin. Curiously, that user was hidden in the web-gui under Panorama -> Administrators. This was among some changes around adding new firewalls, so my be...

VM sdb drive shows 1.7TB in CLI and not seen in GUI for Panorama

Hi, We are trying to rebuild our Panorama instances that did a hard crash we could not recover from using 10.1.5h1. We started with a 10.0 ova file and then upgraded to 10.1 and then 10.1.5h2. When we tried to commit the snapshot we saved from the secondary we noticed that it failed because there we only 13GB of disk space for logs. The CLI show...

Panorama PanOS 10.2.2-h2 relogin "Session has expired..." issue

We have an issue with the login page of panorama. When we get kicked out of panorama due to a timeout, logging in again doesn't work and we get redirected to the following page. This happens in different browsers (Edge, Chrome, Safari).

RDP connection incomplete

Hi Team, we have allowed RDP port from pan when i see logs its showing action is allowed application is incomplete & session end reason -aged out user is able to do telnet but when he tries to take RDP its fails please help us.

Gemini (formally Bard) App-ID news.

Since the artificial intelligence tool Bard is now Gemini. Has there been any news on when they will switch and ad an App-ID for Gemini? I know for ChatGPT and Bard they were quite quick to add them. Surprising they haven't given the popularity of Artificial Intelligence and the utilization has only gone up.

Palo Alto Panorama All wildfire logs have the same hash value. What's the problem?

Auto Renewal for Certificates?

Hello,I wanted to see if there was a way to set up "Auto Renewal" for our certificates for GlobalProtect? Not sure if this is even an option or not. Right now, we manually renew and import/export the certificate.