Tagging all ENIs in AWS with Panorama plugin

The AWS plugin grabs tags of ENIs for EC2 and ALB.  It does not get tags for ELB Classic, or ECS or any other ENIs as far as I can tell.  I want to be able to control traffic with tags on ENI's attached to things other than ALB/EC2 (e.g. ECS containe

API/CLI - how to access subset of devices by tag assigned to them?

Hi there, 
I'm going to use device's tags to have another dimension beside of template/device groups. 
I've assigned a tag to subset of devices (using Panorama>Managed devices WebUI), but I'm really lost how I can get access/filter devices by this tag

what is the difference between "commit to panorama" and "save changes"?

I do see commit and config options in Panorama. I am aware that commit option is used to push configuration to Panorama and then to Managed firewalls. I would like to know when to use "save changes" and what is it for under config options.if possible

HIP-PROFILES IS A DUPLICATE NODE ERROR

Hello ,

I got a strange situation on my Panorama 10.0.7 software version .

When i'm trying to push security policies from it to managed firewall from a lower OS version like 8.1.x i'm receiving this " hip-profiles is a duplicate node " error .

As

Is there a way to see all raw data collected by GlobalProtect APP ?

Hi,

I see in the below document, that you need to create HIP Object/Profile to view the raw host data collected by the GlobalProtect APP. My question is there a way to skip this step and see all raw host data collected by GlobalProtect APP without de

Panorama VM support vmotion and DRS ?

1. Does it support Vmotion and DRS ?
2. Backup required ? If yes, Snapshot backup supported. Is it recommended ?

Panorama template limitations

Hi Folks,

We had recently migrated HA Firewall pair to Panorama.

We had observed that after migration the HA Settings (HA peer IP address, device ID, etc), Management IP address are over-ridden locally on the firewall. 

I had gone through an do

So.... Crimea is gone?

Was trying to commit some shared objects and getting an interesting error:

• Validation Error:
• shared -> pre-rulebase -> security -> rules -> GeoBlocking_Outbound -> destination 'CE' is not an allowed keyword
• shared -> pre-rulebase -> security -> rules

Managing HA Settings of firewall locally instead of managing it from Panorama

Hi Folks,

We had recently migrated HA firewall to Panorama using the below documentation 

worldarchitecturenews.com is blocked in URL filtering by news category

The URL: worldarchitecturenews.com   

was earlier accessible through port 80 but later on it migrated to port : 443 and it became inaccessible. Giving block page when trying to access the URL. The URL is blocked under news category with no Applicatio