This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4960 Views
  • 0 replies
  • 0 Likes

localhost 31377 erno 111 connection refused

I made a configuration change on panorama. commit to panorama fail I checked the plug-in and only the sd_wan 2.02 plug-in was installed No other plug-ins are installed. My revert to running panorama configuration failed to solve the problem.

Panorama Log collector

Hello, I would like to know on a single log collector can you set up several profiles that send the logs to different servers depending on the source of the logs? We have several Firewall clusters on the panorama and we want to be able to send the logs to different ports depending on the clusters. Thanks in advance for your help.

Mamoudou by • L2 Linker
  • 1742 Views
  • 1 replies
  • 0 Likes

Resolved! Can't edit or move Services objects to the Shared location in Panorama

I am testing out a firewall migration to Panorama with our lab firewall and found that, with the Services objects that I imported from the firewall, I am not able to edit them. I see that their location is "Predefined", and I can't change that location either. I know you are typically able to select an object and then select "Move" to move them ...

MDroyKT by • L2 Linker
  • 3513 Views
  • 2 replies
  • 0 Likes

Unable to Add URL-Based External Dynamic List as Destination in Policy-Based Forwarding Rule on Panorama

I am attempting to use an External Dynamic List (EDL) with a URL-based list as the destination in a Policy-Based Forwarding (PBF) rule on Panorama. However, when I try to add the EDL as the destination in the PBF rule, I am not able to see the URL-based list EDL in the destination list. I have checked that the EDL is configured correctly, assign...

Stellar by • L0 Member
  • 2892 Views
  • 3 replies
  • 0 Likes

error: certfile should be a valid filesystem path

Hi Team, I am trying to automate palo alto version 10.2.3-h2. Initially I tried to use Ansible: palo_security_rule module to push a security rule to palo alto, but I got error "hip_profiles unexpected here". The workaround for this error as looked up in google was to load current config in palo alto, which was not accepted as a feasible solution...

clean up unused objects within Panorama using expedition?

hello all, PA newb here. I recently transitioned to a firewall admin job and am learning my way around Palo Alto for the first time. one issue I've been tasked with exploring is an issue where one of our firewalls has fallen out of sync because it is a VM and has limited object storage capabilities. it is the only VM in our production network. W...

Configure existing Production Panorama template used for Policies/Objects, but not Interfaces/Zones for SD WAN

When we started using the Panorama many years ago, we did so using the templates as an after thought of manually configuring each firewall. We are a small company so it wasn't difficult, but now we want to entertain SD WAN and my understanding is it is best to do this from the Panorama and not individually from each firewall. Since the Interf...

ronan by • L0 Member
  • 2113 Views
  • 1 replies
  • 1 Likes

ARP spoofing solution

Looking for a solution for ARP spoofing within a network to protect against MiM attacks. Our security team has asked us to implement such a solution after performing successful MiM ARP spoofing within a segment, simulating a compromised host. All network segments in the data center use the PA as the gateway. The switch VLAN's are L2 only. If th...

backing up running-config.xml or set cli config-output-format set

Hi all very basic question however im unable to find a search function here ?? is there a way i can scp the runing-config.xml from the firewall. NOT export from the firewall basically im trying to scp the running-config.xml however im unable to firn the file path i have tried "scp [email protected]:running-config.xml" however this does not fi...

Resolved! Template issue

I am trying to configure the DHCP server for 3 of our devices through Panorama. When doing the add and selecting the interface only one interface shows of the 3 devices. We have 3 devices. Denver, Omaha and Atlanta. The Denver FW shows the interface and when I am on that FW it has the green wheel saying it is from the denver-stack. The other 2 F...

dmpeter by • L0 Member
  • 2474 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama LDAP Login UI

Hello I am trying to configure panorama to use ldap login for the UI. I've followed the article below, but still get invalid username and password. I've setup authentication profile and administrator to my AD group. Not sure why I can't get this function to work. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/authentication/config...

Resolved! How to find the user's Connected gateway for the past 30 days.

How to find the user's Connected gateway for the past 30 days. we have users travelling frequently, we need the option to see the gateways connected in the last 30 days. for example, my machine is currently connected to Global protect VPN ( US EAST)- How do I validate if this is on Panorama?

vij by • L1 Bithead
  • 3237 Views
  • 1 replies
  • 0 Likes

Resolved! Sending monitoring information from firewall to Panorama

Hi, We have migrated our legacy firewall settings which was working without Panorama to a new firewall which is working with Panorama. On Panorama the information which should appear under Monitor is not there. I researched a bit and understood that in order to show session logs in Panorama, Monitor tab, I need to configure for every security ...

  • 718 Posts
  • 47 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks