Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

New firewall added to panorama, no backups

I added a new firewall to panorama, panorama shows the firewall as 'connected' and 'valid', and when I go to manage backups, it lists several backups, and the timestamps are correct, but each backup only shows 'false' in the popup window. do i have to do another step? i only want panorama to do backups of the config, i do not want to do any co...

Bulk add IP addresses to object groups in Panorama

Hello, I have several IP addresses I need to add to an existing Object group and I keep reading you can do either CSV import or use CLI. Does anyone know the best way to do this since we are using Panorama to manage other firewalls? Thank you,

errores cuando realizo commit en consola panorama

Buenos dias, Me encuentro realizando una arquitectura de preproducción con una consola de panorama virtual y firewall virtualizados. El problema es que a la hora de realizar "commit" en la consola panorama, me encuentro con los siguientes errores: OperaciónCompilarEstadoCompletadoResultadoFalloDetallesValidation Error:shared -> pre-ruleba...

How to proactively monitor which firewalls stopped sending logs to panorama.

Panorama is our log collector and all firewalls reporting to panorama forward the logs to panorama too. However at times these logs stopped reaching panorama ( break due to several reasons ) and we end up finding them after a long time. This is causing anyone to loose important logs in Panorama. So how can we proactively monitor this setup. S...

Instance type for panorama in AWS

Hi Team, We are planning to deploy Panorama in (Panoroma mode) AWS for 2 firewall. The recommended instance type is c5.4xlarge (16vCPU) which is costly for us. Is there any issue anyone observed if we use other instance type of having little resources like 4 vCPU or 8 vCPU? Thanks, Surya

Unable to configure static route for aggregate interfaces in logical router of Panorama GUI

Hi Team, PA-7050 firewall and PanOS version - 10.2.2-h2 Panorama M-600 and PanOS version 10.2.2-h2 We couldn't configure the static route with aggregate interfaces in the GUI using the logical routers in Panorama. In the logical routers drop-down menu, the aggregate interfaces were not listed. As per the below document, we can do it in the...

PANORAMA UNRESPONSIVE OR CANNOT LOG IN AFTER PAN-OS REBOOT

Issue : Panorama is Unresponsive or you cannot log in After PAN-OS Reboot. (PanOS 10.1.1) Primary Troubleshooting: 1. Restarted mgmtsrver process through console access....but it didn't worked. 2. Again rebooted panorama through console access, its rebooted but still unable to access login GUI and SSH....

Disable Command CLI through Panorama

How to disable policy of local firewall through panorama. I want to do it ia cli...can any one tell mee command to disable firewall policy of a device group via panorama

Palo 10.1 look and feel?

Is it possible to make Panorama 10.1 look and feel like 9.1? I find the colors and fonts used in 10.1 harder to read.

Identify Panorama Template Overrides on Firewalls

I have a scenario where we have 70 firewalls, in HA pairs, managed by Panorama.Templates are set up, and pushed to the firewalls, but *some* of the firewalls have template overrides set for various things.I am looking for a good way to identify, whithout visually eyeballing every web gui page on every firewall, which settings on individual firew...

Final Stack / Template setup after migrating HA Pair.

Hi, I am following the pan admin guide below to onboard a production HA pair. https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management it is not clear what the final template/stack setup will be. If I follow the article ex...

Panorama appliance question

We have an old Panorama physical appliance (5 years old) which will be replaced within the next four days I'm wondering if by any chance it can be used as host. That of course would mean wiping the ssd disk and installing a linux distribution. In a nutshell can a Panorama physical appliance be treated as normal host once deprived from its PAN‑OS...

Migrate Panorama to AWS

Hi, I'm planning to do a migration of Panorama from esxi to AWS. This will require the Panorama to have a different IP address. What's the best way to handle the IP change, if the firewalls are getting the Panorama IP config from device template setting? Is it best to override locally after the migration and then update the template after?

Panorama LpS

Hello, I would like to better understand the Log per Second and CPU load related the Panorama. Considering a Panorama M200 in Mixed mode (Management + Log collector). The M-200 LpS capacity is 10000. 10000 is the max log per second that means that a spike of 15000 the Panorama will lose 5000 LsP by default or that Panorama try to get it but the ...

User-ID Server Monitoring switch to WinRM

How can I check which User-ID Server Monitoring I am using in the Palo Alto so that I can switch to WinRM if it isn't selected already?

Discussions