configuration to get traffic logs from a Palo Alto firewall into Panorama without directly adding it as a managed device

I need help to configure log forwarding on firewall to Panorama but I dont want to add the firewalls to Panorama configuration to get traffic logs from a Palo Alto firewall into Panorama without directly adding it as a managed device

Generate certificates in templates with cli

Hi everyone, i know that i can generate certificates on the panorama itself with the command: request certificate generate ca no signed-by myCA digest sha512 days-till-expiry 365 countrycode DE organization "My Org" hostname [ hostname hostname.mydomain ] name hostname.mydomain certificate-name myCert algorithm RSA rsa-nbits 4096 but as th...

Rejoin a factory default PA firewall to HA which managed by Panorama

Hi all I have a HA PA pair which managed by Panorama in our environment, and we found the passive one is unable to login locally, and cannot commit new configuration to the passive one thru Panorama. So we do factory default of the passive one and configure the management IP and admin user again. After we do factory default, we joined the HA...

Green Horizontal Bar in PanOS 10.1 GUI

I just started noticing this horizontal green bar appearing between the yellow and blue fields on the header in PanOS 10.1. Does this mean anything? It's not present all the time. The red dot in the screenshot was accidentally painted on by the snipping tool.

Panorama HA Two different Data Center

Dear Folks, I want to setup Panorma High availability between two different data centers [Netherland-Germany] I have checked the latecny is allowed upto 1000 ms. I have some following doubts. 1. since these DC's running different Ip address spce so for HA communication between these peers have two different Ip address, is not an constrains?...

ZTP configuration at remote sites

We have some new PA-440's are are trying to work through the ZTP process. We have ZTP configured, and the devices are registered. We now see them as connected to our Panorama server, but we are unsure of the next step. We can't seem to make some changes to do the devices as they are still in ZTP mode, but the documentation to turn ZTP off...

How can view log from another log collector on Panorama

Hi Expert , In case we have older Log collector and now we have send log to New Log Collector we create differance collector group per LC but I would like to know how can view older log from older LC on Panorama . Thank you

Help Palo Alto Trial License

Aggregate memory utilization in Panorama

Hi, we have Panorama M-200, Our Snmp monitoring system recently began to alert us about the 85% high aggregate memory utilization in Panorama. now the question is , who the memory utilization is calculated in Panorama the show system resource command show the follow details. fw> show system resources top - 12:17:48 up 272 days, 21:30, ...

Scheduled backup export

Hi there, I have a scheduled backup job running every night, which exports my Panorama config to a backup server, it is running for over a year now without any problem. Yesterday I went over the config, changed the time and permitted the config. This morning I saw that the backup failed due to missing ECDSA SSH key. Failed exporting config...