Panorama template section is empty : No interfaces, no zones

Hello team, I have 2 firewalls managed in my panorama. When I go to template section on Panorama I can not see anything, any interfaces, zones so it's not possible to make any change from the Panorama. I have to make changes directely on the firewall. Do you know how can I fix out this issue ? Kind regards

Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

Bulk add existing addresses to an existing group

Hello,I'm hoping someone can help out. I've just finished a merge from an ASA to Palo Alto through Expedition. The ASA had 3000+ addresses as part of an existing address group. I've tried multiple times to merge, and push the changes through the API, but it would appear all the addresses don't show up in the group.I guess what I'm asking, is ...

Shared RADIUS Server Profile, and Shared Authentication profile not showing up in a new Template?

Hi Friends, Please note that I have a Panorama running version 10.1.5-h1, and I just registered a couple of new PA-440 Palos which have the same software version 10.1.5-h1. I also provisioned it's corresponding Template Stack, Device Group, and pushed everything successfully to those new firewalls. However, my weird thing is that I should be abl...

Panorama - log settings validation error

Recently we created a new template with different server profiles and log settings in Panorama and tried validating in the target firewalls but it throws the validation error. Looking for the experts advise to address this issue. Panorama is on PAN OS version 9.1.10 Affected Firewalls are running on PAN OS version 8.1.13 Validation Error: ...

PALO ALTO 5020 migrate to 5220 from Panorama

HI,, we have plan to migrate PA 5020 to PA 5220 with 40G, Please anyone let me to best practices with less downtime migration. herewith mentioned that how current our environment setup has. 1. currently we have 3 PA Integrated with Panorama , 2. 5020 has 6 vsys 3.in that one of template (polices alone not NAT) share to 3 different PA (One ...

Panorama Upgrade from 9.1.12-h3 to 9.1.13-h3

I am trying to upgrade my Panorama from version 9.1.12-h3 to 9.1.13-h3. I download 9.1.13-h3 I install 9.1.13-h3 After reboot and I wait for logon service to be ready... I can get to the main HTTPS page and see my company branded logo and by custom message on the login page like normal. When I try to login with either my local admin account or m...

Palo alto intrazone and interzone rules

I want to be alerted if the Palo Alto default intrazone or interzone rules are ever set to "allow".

Import Device config into Panorama Missing Radius key

The firewall was removed from Panorama and trying to import device config into Panorama again to fully managed the firewall by Panorama. We have made sure that all shared objects and policies everything merged on local firewall. However the import device config commit failed on Panorama, throwing an error : devices -> localhost.localdomai...

SaaS Application Usage Report

From Panorama, we've always ran the SaaS Application Usage PDF report and was able to save the report as PDF. Since upgrading Panorama to 10.1, the report can no longer be saved as PDF. I can't find anywhere that shows this as a behavior change. Is anyone experiencing the same?

Firewall Logs to Qradar

I am trying to send logs from Panorama to Qradar. I have around 30 to 35 Palo alto firewalls in the network, all the firewalls are centrally managed by Panorama. I am receiving logs from firewalls to Panorama, but on Qradar I can only see Panorama logs. My client wants to see the logs from all the firewalls in the network on Qradar. Is there any...