Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

ikev2 site to site VPN to sites with multiple public ip addresses(used for failover)

for a client, i created these many tunnel interfaces for each of their sites. Now, for all these sites, they have 2-3 public ip addresses(for failover purposes). So, will i have to create new tunnel interfaces or should I just create new Ike gateways and ipsec tunnels and point them to the tunnels which I created earlier(shown on the screenshot ...

Settings from global-template stack not showing on local pan-template but are showing in the template-stack.

I have configured a global-template on Panorama and added some settings to it such as Netflow, SMTP, SNMP and what have you. I have a template for the local pan called pan-template and a template-stack that contains both global and pan-template with pan-template at the top. The problem I am having is settings from global-template are not showi...

Resolved! reading ARP table on Panorama

Hi,Panorama doesn't have "show arp" command.And there isn't arp information in the tech-support.Can we read ARP table on Panorama?Regards,Tomoyuki Komure

Unable to view Panorama Advisory to check for expired certificates remediation.

Currently we use PA-VM and while I have checked Device Management --> Certificates, I am unable to find the Panorama Certificate mentioned in the email alert. The Panorama certificate for managing NGFWs and Log Collectors will expire on April 7, 2024. Please review the advisory at https://live.paloaltonetworks.com/t5/customer-advisories/ad...

Panorama Eval license issue

Hi there, I've just built a Palo Alto lab in my EVE-NG server (Panorama with 4 PAs FW using KVM VM-100 images) and I've applied Eval licenses on all them and all the licenses have been accepted and updated when I check the license status. However, when I tried to add the PA devices int Panorama, I got this message " S/N is invalid .Maximum nu...

Cancel/undo/revert/delete some Local-overrides that were generated directly in the firewall

Hello good evening, again here bothering and looking for your collaboration for some questions about Panorama. I have the following doubt, I understand that Local Override is not the best practice and should be used only in particular cases. I have the following question: It is possible to simply override "some Local Overrides", I mean loc...

unable to see logs on panorama

Hello Guys, I've recently deployed a Panorama VM on azure. I have imported a firewall's config on the panorama. When I check in the managed devices summary section, the firewall looks connected and is ""In Sync" on the panorama. However, I can't see logs in the monitor section on the panorama. The Panorama is working in Panorama mode with loc...

logged out due to unathorized request from panoroma also config is out of sync with end device after several attempts and push

Issue Updating Local Administrator Passwords via Panorama - Seeking Community Assistance

Greetings Community Members, I'm currently facing a challenge while attempting to update the local administrator passwords from Panorama and then pushing the changes to our firewalls. The process involves modifying the password by selecting a device template, select the administrators, and update the password. Subsequently, I commit the change...

Resolved! pan-os-python trying to pull list of security polices from panorama using a specific device group

# This defines how we will connect to panorama mypanorama = panorama.Panorama(device, api_key=auth_key) # This defines the device group we will be connecting to palo_device_group = panorama.DeviceGroup(devicegroup) mypanorama.add(palo_device_group) rulebase = PreRulebase palo_device_group.add(rulebase) existing_policies = SecurityRule.refreshal...

Resolved! what all ports Panorama needs access to internal/internet

-Currently we are not restrict any specific policy from panorama to any services hence we planned to restrict required destination and Port access .

Getting PAN Cert Expires message

We have received the Certificate expiry alert in Pan OS & Expiration Date is Dec 31st, 2023. Kindly advice.

Import devices configuration into Panorama stucked at 99% since last 48 hours

We are import PA5220 firewall backup ( selecting import shared object) into Panorama VM , but stucked at 99% since last 48 hours. If we unselect import shared object , job is completing in minutes. But while selecting shared object option its taking time.There are 16000 objects in PA5220 firewall. What could be the reason for slowness in import...

Resolved! TAP or Vitual Wire interface?

Which interface type allows you to control traffic with the least disruption to a network? As per the Palo Alto Networks Study guide its saying as Virutal Wire, where as when searched in Chat GPT and web its showing as TAP. Can someone suggest which one is the correct answer? Web Image: As per Palo Alto Study Guide:Domain 6: Thank you.

configuration to get traffic logs from a Palo Alto firewall into Panorama without directly adding it as a managed device

I need help to configure log forwarding on firewall to Panorama but I dont want to add the firewalls to Panorama configuration to get traffic logs from a Palo Alto firewall into Panorama without directly adding it as a managed device

Discussions

Welcome to the Panorama Discussions!

ikev2 site to site VPN to sites with multiple public ip addresses(used for failover)

Settings from global-template stack not showing on local pan-template but are showing in the template-stack.

Resolved! reading ARP table on Panorama

Unable to view Panorama Advisory to check for expired certificates remediation.

Panorama Eval license issue

Cancel/undo/revert/delete some Local-overrides that were generated directly in the firewall

unable to see logs on panorama

logged out due to unathorized request from panoroma also config is out of sync with end device after several attempts and push

Issue Updating Local Administrator Passwords via Panorama - Seeking Community Assistance

Resolved! pan-os-python trying to pull list of security polices from panorama using a specific device group

Resolved! what all ports Panorama needs access to internal/internet

Getting PAN Cert Expires message

Import devices configuration into Panorama stucked at 99% since last 48 hours

Resolved! TAP or Vitual Wire interface?

configuration to get traffic logs from a Palo Alto firewall into Panorama without directly adding it as a managed device

resolve hostname in logs now working in panorama

IoT Devices in Panorama

All committed entries with commit version < 3434 have been cleaned up from the replay database.

Panorama PDF summary report of 1 week/month

Does thePAN 11.1.13 on panorama will work on local FW that is using 10.1.13-hr?

Re: Log Collector Redundancy

Re: Logs Panorama

Re: Log Collector is error after upgrade OS version from 11.0.4-h2 to 11.1.x

Re: GlobalProtect Logs Showing Only a Few Days of Retention on Panorama

Improve log filtering workflow with quick “exclude / NOT filter” option from Traffic logs

Unlock your full community experience!

Resolved! reading ARP table on Panorama

Resolved! pan-os-python trying to pull list of security polices from panorama using a specific device group

Resolved! what all ports Panorama needs access to internal/internet

Resolved! TAP or Vitual Wire interface?