Disable inherited policies in a Device Group

I'm guessing this would be a Feature Request, as it's something that's not available in Panorama 7.x, 8.x, or 9.x (haven't checked 10.x).

Is there a way to disable Policies (whether Security, NAT, QoS, etc) that have been inherited via the Device G

Migrate Panorama from Azure to ESXi is failed

I am trying migration Panorama with following procedure but have not succeeded, yet.

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-di

Need to test policy on many policies

Hi. I need to test if an internal site is accessable from several different zones. the destination and port will always be the same, and any source IP in the zones would work as a test, is there a way to run a policy match in a bulk manner where I ca

Pan Configurator Failing to download Panorama Config

I have configured the latest version of the PAN-Configurator. 

I have created my API key from a superuser account. 

when I tried to issue a command to label some rules it fails

php rules-edit.php in=api://192.168.0.10 ruletype=security location=NDH1-CH

access domain with saml sso using Azure AD

Hi expert,

We have Pano auth with SAML SSO , which is with Azure AD. To deploy access domain feature, can see some doc for Radius auth, but none is for SAML. Looks there is access-domain attribute on Azure AD, but I have no access to verify.

If a

How to move all template configuration in "Shared" location into Vsys1

Hi all,

Some help on this would appreciated.

Evaluating a client panorama that has a variety of templates on it, with much of the configuration in the templates being done in the "Shared" location, and much of it in "vsys1" location, including a

Panorama template zone logging profile and dependency loop

I have entered a dependency loop situation in Panorama that surprised me a little.

We have installed a new firewall, and configured it to talk with Panorama. It shows up here and we are ready to push configs.

Said firewall have a template stack assoc

Encryption algorithm used in Panorama for admin users

Hello

Due to an internal IT risk audit, we need to know the encryption algorithm that Panorama uses to store the device administration accounts in your local database such as the master admin account or any other account that we may create to admin

Panorama integration

Do we foresee any downtime during taking existing running firewalls behind panorama server? Also what precautions we should consider for such work?