Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4845 Views
  • 0 replies
  • 0 Likes

Update steps RMA Replacement Firewall for case 2: Old device is still connected to the network and firewall is managed from panorama:

The following KB missing steps for version 10.1 as authentication key had introduce for this version onward https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clkn Based on case 2 : if follow the steps provided the replaced firewall doesnt appear on the manage device and notice managed device is in disconnect state. ...

VLim_1-1681815155847.png
VLim by L2 Linker
  • 1458 Views
  • 0 replies
  • 0 Likes

clean up unused objects within Panorama using expedition?

hello all, PA newb here. I recently transitioned to a firewall admin job and am learning my way around Palo Alto for the first time. one issue I've been tasked with exploring is an issue where one of our firewalls has fallen out of sync because it is a VM and has limited object storage capabilities. it is the only VM in our production network. W...

configd zombie process

Hi Team, We are facing slowness issue with our Panorama and while troubleshooting we found that there is Zombie process for configd. Could you please let us know if that is causing the slowness. Regards, Umesh Kumar

Configure existing Production Panorama template used for Policies/Objects, but not Interfaces/Zones for SD WAN

When we started using the Panorama many years ago, we did so using the templates as an after thought of manually configuring each firewall. We are a small company so it wasn't difficult, but now we want to entertain SD WAN and my understanding is it is best to do this from the Panorama and not individually from each firewall. Since the Interf...

ronan by L0 Member
  • 1968 Views
  • 1 replies
  • 1 Likes

ARP spoofing solution

Looking for a solution for ARP spoofing within a network to protect against MiM attacks. Our security team has asked us to implement such a solution after performing successful MiM ARP spoofing within a segment, simulating a compromised host. All network segments in the data center use the PA as the gateway. The switch VLAN's are L2 only. If th...

backing up running-config.xml or set cli config-output-format set

Hi all very basic question however im unable to find a search function here ?? is there a way i can scp the runing-config.xml from the firewall. NOT export from the firewall basically im trying to scp the running-config.xml however im unable to firn the file path i have tried "scp username@1.1.1.1:running-config.xml" however this does not fi...

Panorama Logging in AWS - Different Volume Types

According to the support documentation on implementing Panorama in AWS and attaching a virtual disk, the instructions indicate that we should use the GP2 volume type for general purposes. Here We're wanting to evaluate whether Panorama Logging supports using GP3 instance types instead of GP2 so we can save cost on our storage volume. From wha...

asiler1 by L0 Member
  • 2463 Views
  • 0 replies
  • 1 Likes

Resolved! Template issue

I am trying to configure the DHCP server for 3 of our devices through Panorama. When doing the add and selecting the interface only one interface shows of the 3 devices. We have 3 devices. Denver, Omaha and Atlanta. The Denver FW shows the interface and when I am on that FW it has the green wheel saying it is from the denver-stack. The other 2 F...

dmpeter by L0 Member
  • 2370 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama LDAP Login UI

Hello I am trying to configure panorama to use ldap login for the UI. I've followed the article below, but still get invalid username and password. I've setup authentication profile and administrator to my AD group. Not sure why I can't get this function to work. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/authentication/config...

Resolved! How to find the user's Connected gateway for the past 30 days.

How to find the user's Connected gateway for the past 30 days. we have users travelling frequently, we need the option to see the gateways connected in the last 30 days. for example, my machine is currently connected to Global protect VPN ( US EAST)- How do I validate if this is on Panorama?

vij by L1 Bithead
  • 2990 Views
  • 1 replies
  • 0 Likes

Resolved! Sending monitoring information from firewall to Panorama

Hi, We have migrated our legacy firewall settings which was working without Panorama to a new firewall which is working with Panorama. On Panorama the information which should appear under Monitor is not there. I researched a bit and understood that in order to show session logs in Panorama, Monitor tab, I need to configure for every security ...

Unable to assign an authentication profile to an administrator within Panorama

Panorama Version: 10.2.2-h2 Hello, I am unable to assign an authentication profile to an administrator within Panorama. I have created an authentication profile via Device > Authentication Profiles. I have created an administrator account via Device > Administrators. The authentication profile drop-down list is always blank. If I sel...

Dynamic address objects not showing in Panorama

I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy. Under the AWS plugin configuration, I can see Panorama correctly retrieving information from AWS based on the tags I've defined. However, while still in Panorama, when I go to 'Objects > Address groups', I ...

MartinE by L2 Linker
  • 2894 Views
  • 1 replies
  • 0 Likes

Upgrade error Panorama 10.2.0 to 10.2.1

Getting the following message trying to upgrade Panorama to 10.2.1. There is disk space available on the VM and datastore, I've tried rebooting as well. Failed to install 10.2.1 with the following errors. SW version is 10.2.1 Nothing pending to cancel Error: findfs: unable to resolve 'LABEL=sysroot0' Failed to install version 10.2.1 type...

  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors