Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

ARP spoofing solution

Looking for a solution for ARP spoofing within a network to protect against MiM attacks. Our security team has asked us to implement such a solution after performing successful MiM ARP spoofing within a segment, simulating a compromised host. All network segments in the data center use the PA as the gateway. The switch VLAN's are L2 only. If th...

backing up running-config.xml or set cli config-output-format set

Hi all very basic question however im unable to find a search function here ?? is there a way i can scp the runing-config.xml from the firewall. NOT export from the firewall basically im trying to scp the running-config.xml however im unable to firn the file path i have tried "scp [email protected]:running-config.xml" however this does not fi...

Resolved! Template issue

I am trying to configure the DHCP server for 3 of our devices through Panorama. When doing the add and selecting the interface only one interface shows of the 3 devices. We have 3 devices. Denver, Omaha and Atlanta. The Denver FW shows the interface and when I am on that FW it has the green wheel saying it is from the denver-stack. The other 2 F...

Resolved! Panorama LDAP Login UI

Hello I am trying to configure panorama to use ldap login for the UI. I've followed the article below, but still get invalid username and password. I've setup authentication profile and administrator to my AD group. Not sure why I can't get this function to work. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/authentication/config...

Resolved! How to find the user's Connected gateway for the past 30 days.

How to find the user's Connected gateway for the past 30 days. we have users travelling frequently, we need the option to see the gateways connected in the last 30 days. for example, my machine is currently connected to Global protect VPN ( US EAST)- How do I validate if this is on Panorama?

Resolved! Sending monitoring information from firewall to Panorama

Hi, We have migrated our legacy firewall settings which was working without Panorama to a new firewall which is working with Panorama. On Panorama the information which should appear under Monitor is not there. I researched a bit and understood that in order to show session logs in Panorama, Monitor tab, I need to configure for every security ...

Unable to assign an authentication profile to an administrator within Panorama

Panorama Version: 10.2.2-h2 Hello, I am unable to assign an authentication profile to an administrator within Panorama. I have created an authentication profile via Device > Authentication Profiles. I have created an administrator account via Device > Administrators. The authentication profile drop-down list is always blank. If I sel...

Dynamic address objects not showing in Panorama

I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy. Under the AWS plugin configuration, I can see Panorama correctly retrieving information from AWS based on the tags I've defined. However, while still in Panorama, when I go to 'Objects > Address groups', I ...

Cannot add Administrator

Not really why its complaining. I setup ldap server profile and authentication profile.

Upgrade error Panorama 10.2.0 to 10.2.1

Getting the following message trying to upgrade Panorama to 10.2.1. There is disk space available on the VM and datastore, I've tried rebooting as well. Failed to install 10.2.1 with the following errors. SW version is 10.2.1 Nothing pending to cancel Error: findfs: unable to resolve 'LABEL=sysroot0' Failed to install version 10.2.1 type...

Object edit from policy view doesn't work v 10.2.3-h4

Hello everyone, I recently upgraded Panorama to v 10.2.3-h4 and noticed that now I can not edit objects from Policy view. I have to go to Objects... I noticed that the same issue is on my PA-220 v 10.2.3-h2... Is is just me or anyone else has noticed that? Thanks Tomasz

Panorama 10.1 Color Theme

I know I can't be alone with people that are having issues with people reading the new colors for Panorama. Light Grey text on off white background is a horrible decision. Is there a way to change this or is PA working to get this corrected cause I can only think something that bad is a BUG.... We have 40+ engineers on our team that stare of Pan...

Resolved! Reference not valid--Panorama

Hello, Trying to deploy a new subinterface via a Panorama template to two PA-3060 devices but getting error below Validation Error:. import -> network -> interface 'ethernet1/6.52' is not a valid reference. import -> network -> interface is invalid. Commit failed It doesn't matter what name or VLAN ID I give the interface, it does n...

Managed Firewall will not connect

Hi all, Recently, our Panorama instance failed on us and I'm having to rebuild the VM from scratch. I've gone through all setup and ensured licenses applied to Panorama. I am trying to now re-add one of our client firewalls, but it will not connect. I have checked traffic for port 3978, applied device certificate to Panorama, checked MGMT se...

Resolved! Device Group Hierarchy

Currently all of my palos are under shared. I want to insert a layer between shared and my palos called Global. Is this possible without messing any settings that exist currently on firewalls?

Discussions

Welcome to the Panorama Discussions!

ARP spoofing solution