This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4961 Views
  • 0 replies
  • 0 Likes

SDWAN Commit Failed

I upgraded to PAN-OS 10.2.0 on Panorama, and when I do a commit, I get a SD-WAN config validation confirmation, but the commit fails says initiate phase1 failed Anyone seen this? I have a ticket open, and been on hold for over an hour.

bschaper by • L2 Linker
  • 4190 Views
  • 2 replies
  • 0 Likes

Resolved! 10.1 Panorama Registration Auth Key issues

I am posting this question, and answer, for the benefit of the community. The Registration Auth Keys are a ONE TIME authorization key that allows a FW/WF/Logger device to talk to Panorama. However, it appears that the order of configurations matters...and if the initial communication fails (for whatever reason) you must restart the pairing pr...

rolinger by • L2 Linker
  • 7113 Views
  • 1 replies
  • 0 Likes

Resolved! Doubt about Panorama Template Stack and if the template is superimposed on the same local configuration

Hello, good morning, thank you very much for your collaboration. Here again waiting for your collaboration to solve some doubts about Panorama. In this case, in relation to the Template/Tempkate stack. For example, if I have locally configured the interfaces of a Palo Alto firewall and decide to use a template, a template that includes "...

Metgatz by • L4 Transporter
  • 8443 Views
  • 5 replies
  • 0 Likes

Panorama Device Commit Failure 10.1.4-h4

I'm trying to import a production firewall into panorama and am getting a strange error when trying to do the first commit. I have seen someone else in the Paloaltonetworks subreddit list the exact same error on the same version. Both panorama and the PA440 are on 10.1.4-h4 1. I have imported the config 2. I have pushed the config bundle 3. W...

traylorm by • L1 Bithead
  • 8335 Views
  • 1 replies
  • 0 Likes

Resolved! Migrate firewall to New Panorama and IPSEC VPN Preshared key is not migrating over with the config

I have migrate 4 firewalls from old panorama VM to new panorama VM and notice the preshared key for IPSEC is missing. My customer have lost their all IPSEC VPN preshared key is there any method I can migrate the firewall to new Panorama I can migrate with the Panorama. We are following below guide to migrate the panorama https://docs.paloalto...

JiaXiang by • L4 Transporter
  • 3587 Views
  • 1 replies
  • 0 Likes

Commit issue after upgrade Panorama 9.1.13-h3

After upgrade panorama to 9.1.13-h3 version, I faced with some problems. ( 9.1.13-h3>preferred release) When Location Shared is selected when changes are made to the objects on the panorama, it does not commit to all related devices.In this version, when it is Shared, it automatically commits the location to all relevant branches without sele...

Master User-id device receives non-functioning configuration for userID Group Include list from Panorama

I have a User-Id configuration that has been working successfully for 6 months. I went to add a new group to the group include list, and the syntax that was written from Panorama had JUST the group name in this form :domain\group_name. The working groups as listed by running the 'show config merged | match group-include-list' all have a syntax...

Resolved! Fail to migrate Palo HA FW to Panorama Mgmt

Hello, I tried to migrate Palo HA FW to Panorama mgmt as per below guideline link, but fail in step 5.5. this is the step what I did; - Clear "Enable Config Sync" on both FW (OK)- Connect both FW to Panorama (OK)- Add both FW to Panorama (OK)- Import config of both FW into Panorama (OK, but show alert icon(indicate "HA: not in operation") device...

zinkt101 by • L1 Bithead
  • 9324 Views
  • 8 replies
  • 0 Likes

Panorama logs - using local Panorama VM disk for logging - unable to view logs from firewalls prior to 00:29

I have Panorama VM running in "Panorama mode" on VM ESXi, version 10.1.4 I have configured "managed Collector" to be Panorama, and diskA (which is a 2TB disk) with a "Collector Group" for 1x HA firewalls to send logs to When i view the logs in Panorama, i see the logs from the firewall devices, but i never see the logs from the previous day...

CarlUK by • L0 Member
  • 2492 Views
  • 1 replies
  • 0 Likes

Resolved! Log forwarding to syslog server from Panorama or Firewall

Hello everyone, I have a question for log traffic and forwarding to syslog server. I have one panorama that managed a firewall pa-5250 and I see log traffic on two devices. But when I want to forward it to a syslog, I have to forward panorama's log or firewall pa-5250's log ? Thank's in advance !!

EndritK by • L0 Member
  • 5729 Views
  • 2 replies
  • 0 Likes

Logs from secondary Panorama

Hello Team, We are having two panorama's configured in HA. As of now all the traffic is been handled by Primary Panorama and secondary is on handby. Now can we use the secondary panorama for log collection to decrease the CPU on primary? if so kindly let us know how ?

Goutham by • L0 Member
  • 2302 Views
  • 1 replies
  • 0 Likes

Resolved! Referencing items in a template that are defined in another template.

I have one template that had most of my default settings that get pushed to all my firewalls. In this template, I have defined authentication profiles. I have another template that I am using to push Global Protect Portal/gateway settings to a firewall. Both of these templates are in the same template stack. The problem I am having is th...

RHuss1 by • L1 Bithead
  • 6751 Views
  • 2 replies
  • 0 Likes

Resolved! Gets "import -> network -> logical-router unexpected here" when push to device

Hi, I did a factory reset and upgraded my PA-220 to 9.1.12-h3. Installed device certificate and licenses. No interface, no policys, just a clean firewall. Connected successfully it to my Panorama 10.1.3-h31 and successfully made an import. When doing an export I get: Validation Error:import -> network -> logical-router unexpected hereimp...

  • 718 Posts
  • 47 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks