Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 5016 Views
  • 0 replies
  • 0 Likes

Import devices configuration into Panorama stucked at 99% since last 48 hours

We are import PA5220 firewall backup ( selecting import shared object) into Panorama VM , but stucked at 99% since last 48 hours. If we unselect import shared object , job is completing in minutes. But while selecting shared object option its taking time.There are 16000 objects in PA5220 firewall. What could be the reason for slowness in import...

Deepak_K by L3 Networker
  • 7036 Views
  • 6 replies
  • 1 Likes

Resolved! TAP or Vitual Wire interface?

Which interface type allows you to control traffic with the least disruption to a network? As per the Palo Alto Networks Study guide its saying as Virutal Wire, where as when searched in Chat GPT and web its showing as TAP. Can someone suggest which one is the correct answer? Web Image: As per Palo Alto Study Guide:Domain 6: Thank you.

RSJ_141027_0-1704352439403.png
RSJ_141027_1-1704352469337.png

Generate certificates in templates with cli

Hi everyone, i know that i can generate certificates on the panorama itself with the command: request certificate generate ca no signed-by myCA digest sha512 days-till-expiry 365 countrycode DE organization "My Org" hostname [ hostname hostname.mydomain ] name hostname.mydomain certificate-name myCert algorithm RSA rsa-nbits 4096 but as th...

Resolved! Adding new devices to Panorama

Hi I need to add new pair of devices (PA 3220) as HA active/passive mode which will be replacing the existing PA 3060 HA cluster which is in production. I am going to use the same device group, but I would like to rename the template and utilize the same parameters as the original. I was thinking about cloning the template and pushing that to ...

Amin2 by L2 Linker
  • 4302 Views
  • 2 replies
  • 0 Likes

Rejoin a factory default PA firewall to HA which managed by Panorama

Hi all I have a HA PA pair which managed by Panorama in our environment, and we found the passive one is unable to login locally, and cannot commit new configuration to the passive one thru Panorama. So we do factory default of the passive one and configure the management IP and admin user again. After we do factory default, we joined the HA...

alex by L0 Member
  • 1757 Views
  • 1 replies
  • 0 Likes

Green Horizontal Bar in PanOS 10.1 GUI

I just started noticing this horizontal green bar appearing between the yellow and blue fields on the header in PanOS 10.1. Does this mean anything? It's not present all the time. The red dot in the screenshot was accidentally painted on by the snipping tool.

PanoramaGreen.PNG

Panorama HA Two different Data Center

Dear Folks, I want to setup Panorma High availability between two different data centers [Netherland-Germany] I have checked the latecny is allowed upto 1000 ms. I have some following doubts. 1. since these DC's running different Ip address spce so for HA communication between these peers have two different Ip address, is not an constrains?...

ZTP configuration at remote sites

We have some new PA-440's are are trying to work through the ZTP process. We have ZTP configured, and the devices are registered. We now see them as connected to our Panorama server, but we are unsure of the next step. We can't seem to make some changes to do the devices as they are still in ZTP mode, but the documentation to turn ZTP off...

RHuss1 by L1 Bithead
  • 2573 Views
  • 1 replies
  • 0 Likes

Resolved! Adding log forwarding profiles and profile match lists and actions with pan-os-python API

Anyone have any examples of adding log forwarding profiles with match lists and actions using the pan-os-python API? Here's a sample that has me stuck: from panos.panorama import Panorama, DeviceGroupfrom panos.objects import LogForwardingProfile,LogForwardingProfileMatchList,LogForwardingProfileMatchListActionpano = Panorama(hostname='xxx',...

GM001 by L1 Bithead
  • 2128 Views
  • 1 replies
  • 0 Likes

Resolved! Add or remove application in a security rule

Hello.......curl -k -X GET "https://10.10.10.10/api/?key=LUFRPT16R......................Mg==&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='GP']/pre-rulebase/security/rules/entry[@name='Policy-1']&element=<source><member>any</member></source><...

ssovee by L2 Linker
  • 5241 Views
  • 6 replies
  • 0 Likes
  • 724 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Authors
Labels