Importing Shared Object Questions

I have a relatively new Panorama installation. I want to associate 2 in production firewalls with ~1700 shared objects each. These two are only slightly different, I could make them the exact same with a little leg work. I associated and disassociated one of these firewalls in the past with this Panarama so it has ~1625 old shared objects lo...

Commit and Push to Devices - via API call to Panorama

Hi all, I am trying to develop a proof-of-concept script, where our SOC will push an a shared address object to Panorama, with a tag "SOC_IDENT_HIGHRISK". These objects will then be dynamically added to a security group to which block rules are applied. The issue I am having is with the final step "push to devices", referred to as "commit-all"...

Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Hello team, I have a problem with my export configuration Panorama via scheduled task. When I make a test SCP server connexion I have this mesage : Before upgrade to 10.2 the export was working fine. I have also saw that PAN-188052 talk about this issue. Do you know how to fix it ? Could you help me please tu understand this problem. ...

Panorama commit stuck at 50% for so long then fails (2)

Hi Team, I would like to seek for some advise. Panorama is not successful in committing in one of the managed firewalls. I already checked the "Share Unused Address and Service Objects with Devices" and set the timeout to 240 but issue is still existing. I kept digging here in Livecommunity and KnowledgeBase articles but no luck. Regard...

Panorama migration from M-100 to M-200

Dear Community, on weekend, I was migrating M-100 to M-200 and though it might be beneficial to share how it went. Migration scenario: 2x M-100 in HA in Panorama Mode + 2 log collector groups (1 group for M-500 log collectors and 1 group fop M-600 log collectors). The target was to replace 2x M-100 with 2x M-200 with minimum impact and with ...

Dynamic Address Group - Insight in Member Values

I want to build dynamic address groups objects in panorama using tags on my address objects. In my mockup im using three tags, one for zone, one for "routed-in" and one for unique network (vlan or NSX-segment.) With thouse three I can tag all my address-objects and automagicly get those in the address group object. My issue with this is that in...

Export or push device config bundle

Hi For some reason, after exporting from Panorama to PA440, using Export or push device config bundle. The template is not being sent to the 440. When can be the reason?

Configure Panorama as standalone syslog server

Hi, my customer would like use a Panorama device as standalone syslog server (using standard syslog tcp/udp port 514), so that it can collect logs for firewalls it does not manage. Is it possible? So we can configure on the Panorama that manage the firewalls, a syslog server profile pointing the ip address of the standalone syslog server Panoram...

Unable to get log forwarding to work

Filtering panorama policies by modified date.

I'm trying to do some auditing of firewall policies. The organization that I'm working with is wanting an automated way to identify rules that have been disabled for 6 months so they can go in and delete them. The thought I had was to look at the modified date and disabled status to identify the rules - I have seen suggestions about adding thi...