Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Object edit from policy view doesn't work v 10.2.3-h4

Hello everyone, I recently upgraded Panorama to v 10.2.3-h4 and noticed that now I can not edit objects from Policy view. I have to go to Objects... I noticed that the same issue is on my PA-220 v 10.2.3-h2... Is is just me or anyone else has noticed that? Thanks Tomasz

Panorama 10.1 Color Theme

I know I can't be alone with people that are having issues with people reading the new colors for Panorama. Light Grey text on off white background is a horrible decision. Is there a way to change this or is PA working to get this corrected cause I can only think something that bad is a BUG.... We have 40+ engineers on our team that stare of Pan...

Resolved! Reference not valid--Panorama

Hello, Trying to deploy a new subinterface via a Panorama template to two PA-3060 devices but getting error below Validation Error:. import -> network -> interface 'ethernet1/6.52' is not a valid reference. import -> network -> interface is invalid. Commit failed It doesn't matter what name or VLAN ID I give the interface, it does n...

Managed Firewall will not connect

Hi all, Recently, our Panorama instance failed on us and I'm having to rebuild the VM from scratch. I've gone through all setup and ensured licenses applied to Panorama. I am trying to now re-add one of our client firewalls, but it will not connect. I have checked traffic for port 3978, applied device certificate to Panorama, checked MGMT se...

Resolved! Device Group Hierarchy

Currently all of my palos are under shared. I want to insert a layer between shared and my palos called Global. Is this possible without messing any settings that exist currently on firewalls?

Resolved! Copy settings from one template to a new another template

Is it possible to copy settings from one template to another template? Settings like LDAP servers?

How to reinstalled Panorama VM and use the existing disk on ESXi 8

Hi , I got issue about our Panorama VM was corrupt because our ESXi 8 host is crash and I would like to installed a new Panorama and point to the existing disk (SAN disk) for get the old database. How to reinstalled Panorama VM and use the existing disk on ESXi 8 . Pease advise . Thank you. Best regards, Jirapan Muencharern

Resolved! Cannot push from Panorama to new Devices

Keep getting an error when trying to push to new devices. Details: . Failed to refresh EDL config . Commit failed I cant seem to fix this issue...Thoughts?

Panorama

hi can you tell me the right answer of this question please Which level of abstraction allows definition of common policy across multiple next-generation firewalls (NGFWs) in Panorama? A. Zones B. Interfaces C. Zone profiles D. Security profiles

Resolved! Asking for best practice regarding editing multiple interfaces of a FW HA pair which is managed by Panorama

Hi, We have a FW HA pair which we want to put under Panorama's management.However, this pair will have to undergo interfaces editing in a few weeks - putting individual interfaces in aggregate interfaces.If there was no Panorama, I would have edited the FW settings via CLI, commited, and it would have got replicated to the other FW. I have some ...

Resolved! panorama upgrade failed

Hello , We were running Panorama on Esxi . The version was 9.0.9 First we upgraded to 9.0.14 and it went smooth Then we went to 9.1.0 and it never came up ; we saw it went to maintenace mode with below error A critical error has been detected preventing proper boot up of the device. Please contact Palo Alto Networks to resolve this issue...

Panorama System Logs

Very short retention period for Panorama system logs. Panorama is in Management-Only, but the system logs for Panorama only go back 6 days. We have dedicated log collectors that should be handling the firewall logs. below is the output of show system logdb-quota. Can somebody help me with this issue. Quotas: system: 25.00%, 8.000 GB Expira...

i want open case

the device is located behind an upstream NAT device and i enable sdwan in sub interfaces but i can not find upstream nat box to put the real ip if i enable sdwan in physical interface upstream nat box appear

Resolved! Can you import objects from a firewall into a new Panorama config to then push to all firewalls?

We are working on configuring Panorama and currently already have 3 firewall HA pairs. We have 4000+ address objects in one of our firewall pairs. Is there a way to import these into Panorama to then push to the other 2 firewall pairs post integration? It would be great to not have to add 4000 address objects to the other two firewalls.

Email Alert when enable or disable existing policy

Hi , We’ve Palo Alto Firewalls managed by Panorama. We want to configure email alert from Palo Alto but we don’t want to receive every configuration logs. We only want to receive notification by email when we enable or disable existing firewall rules. It is possible to setup a custom email alert for this either from Panorama or Palo Alto? Thank ...

Discussions

Welcome to the Panorama Discussions!

Object edit from policy view doesn't work v 10.2.3-h4