Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4961 Views
  • 0 replies
  • 0 Likes

Resolved! Adding new devices to Panorama

Hi I need to add new pair of devices (PA 3220) as HA active/passive mode which will be replacing the existing PA 3060 HA cluster which is in production. I am going to use the same device group, but I would like to rename the template and utilize the same parameters as the original. I was thinking about cloning the template and pushing that to ...

Amin2 by L2 Linker
  • 4272 Views
  • 2 replies
  • 0 Likes

Rejoin a factory default PA firewall to HA which managed by Panorama

Hi all I have a HA PA pair which managed by Panorama in our environment, and we found the passive one is unable to login locally, and cannot commit new configuration to the passive one thru Panorama. So we do factory default of the passive one and configure the management IP and admin user again. After we do factory default, we joined the HA...

alex by L0 Member
  • 1715 Views
  • 1 replies
  • 0 Likes

Green Horizontal Bar in PanOS 10.1 GUI

I just started noticing this horizontal green bar appearing between the yellow and blue fields on the header in PanOS 10.1. Does this mean anything? It's not present all the time. The red dot in the screenshot was accidentally painted on by the snipping tool.

PanoramaGreen.PNG

Panorama HA Two different Data Center

Dear Folks, I want to setup Panorma High availability between two different data centers [Netherland-Germany] I have checked the latecny is allowed upto 1000 ms. I have some following doubts. 1. since these DC's running different Ip address spce so for HA communication between these peers have two different Ip address, is not an constrains?...

ZTP configuration at remote sites

We have some new PA-440's are are trying to work through the ZTP process. We have ZTP configured, and the devices are registered. We now see them as connected to our Panorama server, but we are unsure of the next step. We can't seem to make some changes to do the devices as they are still in ZTP mode, but the documentation to turn ZTP off...

RHuss1 by L1 Bithead
  • 2552 Views
  • 1 replies
  • 0 Likes

Resolved! Adding log forwarding profiles and profile match lists and actions with pan-os-python API

Anyone have any examples of adding log forwarding profiles with match lists and actions using the pan-os-python API? Here's a sample that has me stuck: from panos.panorama import Panorama, DeviceGroupfrom panos.objects import LogForwardingProfile,LogForwardingProfileMatchList,LogForwardingProfileMatchListActionpano = Panorama(hostname='xxx',...

GM001 by L1 Bithead
  • 2092 Views
  • 1 replies
  • 0 Likes

Resolved! Add or remove application in a security rule

Hello.......curl -k -X GET "https://10.10.10.10/api/?key=LUFRPT16R......................Mg==&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='GP']/pre-rulebase/security/rules/entry[@name='Policy-1']&element=<source><member>any</member></source><...

ssovee by L2 Linker
  • 5154 Views
  • 6 replies
  • 0 Likes

Resolved! Push to Devices failed

Hello,We're using Panorama for the first time and I have a config that I want to push to a PA440. The device state is connected in Panorama and device certificate is valid. In "Shared Policy Commit State" I have a "commit failed" saying:. Validation Error:. rulebase -> pbf -> rules -> default-via-tunnel -> from -> zone 'trust-l3...

Resolved! Frequently changing IP for a FQDN

FQDN : "dc.applicationinsights.azure.com" The IP of the above Azure FQDN changes rapidly, sometimes even within a second. I was requesting my Palo Alto Firewall team to add this FQDN to the allowed policies so that my deployed application can communicate with the Azure AppInsights and send the logs. The observation is that even after adding the...

Aggregate memory utilization in Panorama

Hi, we have Panorama M-200, Our Snmp monitoring system recently began to alert us about the 85% high aggregate memory utilization in Panorama. now the question is , who the memory utilization is calculated in Panorama the show system resource command show the follow details. fw> show system resources top - 12:17:48 up 272 days, 21:30, ...

Scheduled backup export

Hi there, I have a scheduled backup job running every night, which exports my Panorama config to a backup server, it is running for over a year now without any problem. Yesterday I went over the config, changed the time and permitted the config. This morning I saw that the backup failed due to missing ECDSA SSH key. Failed exporting config...

Netzer by L3 Networker
  • 27704 Views
  • 40 replies
  • 1 Likes

Resolved! Panorama Commit issue 10.1.4-H4 after upgrade from 10.1.3

Hi guys, I have a Panorama- 10.1.4-H4 (upgraded from 10.1.3) on AWS and two other firewalls both at 10.0.9 on AWS. After upgrading, Panorama, I cannot just commit. Throws an error saying plugins unexpected here (for schema verification failed-reverted the config and when trying to commit after that gives the plugin error) I see below differe...

paragkarki143_0-1650938630275.png
paragkarki143_1-1650938630280.png
paragkarki143_2-1650938630293.png
paragkarki143_3-1650938630268.png
Pras by L4 Transporter
  • 9558 Views
  • 11 replies
  • 0 Likes

Panorama after rebooting didn't come up

Hi, After rebooting panorama, it didn't come up , also we are not able to commit after making changes, the committ status will stuck at 99%. Also we need to add more controls to Panorama. We need to do it immediately , Can we get one engineer to call immediately , support portal is down and this has to be case. Please share us Zoom link

  • 718 Posts
  • 47 Subscriptions
Labels