This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 5179 Views
  • 0 replies
  • 0 Likes

PA-450R ethernet port

The PA-450R will not sense a port is active unless all 8 pins of the RJ45 are wired. I discovered this after connecting an AT&T fiber link (RJ45 at Demarc)using 802.1Q sub-interface. The Cisco 1921 router was connecting within seconds. It was pinned with the necessary 1 - 3 and 6 for ethernet traffic. I discussed this with support and they s...

Resolved! Log Collector Redundancy

I have a client with a Panorama HA Pair that spans facilities via DWDM. It's fast enough (sub 10ms) to run an LCG that spans both DCs, but this is still poor design as it effectively halves the MTBF (you're now dependent on both members of a 2-node cluster to be operational thanks to the Elasticsearch quorum). So we run 2 independent LCGs to i...

mb_nexon by • L1 Bithead
  • 3752 Views
  • 3 replies
  • 0 Likes

Panorama scheduled export path

Greetings, I am trying to schedule a backup to a Windows 2019 Datacenter scp server and having pathing issues.My SCP user defines a virtual root (e:\backup\SFTP\Panorama) but it doesn't seem to take.From the CLI I can do a backup without an issue using...scp export configuration from running-config.xml to panos.backup@<hostname>:/e:/back...

cloud services plugin update to 5.2.x

Hello, We run a Panorama VM 10.2.12-h2 software and cloud service plugin 5.1.0-h47. Seems 5.1 cloud plugin is being retired and need to update this by March 15th. It also looks like this version supports the recommended version update from Palo in 5.2.0-h69 or later versions. Are steps to update the plugin the same as updating the software...

Tuning Panorama HA Timers to Stop False HA1 Alerts over MPLS

Hello Community, I’m looking for some advice on tweaking our Panorama HA timers. We are seeing "false" failover alerts and want to ensure our plan to fix them is balanced correctly. Setup:Two Panoramas in an Active/Passive HA pair located in different Data Centers.Communication is over a WAN MPLS link.These manage two sets of firewalls (one set ...

Management IP address is getting changed

Hi All, Kindly help me troubleshoot the issue related to a Management IP address is getting changed automatically in Firewall. We have 2 devices are in active-passive mode and managed by Panorama. But somehow passive device Management IP is getting changed to active device IP automatically.

Resolved! Automatically choose REST API version

Hi, I've been using the REST API for some months (and I like it). The base url (e.g. "/restapi/v11.2") I set from a config file. I've been thinking about how to avoid this and use the XML API to lookup the current version (e.g. using "<show><upgrade-history/></show>" or "<show><system><info/></system>&lt...

T.Boess by • L0 Member
  • 3772 Views
  • 1 replies
  • 0 Likes

Panorama SDWAN

Hi I have list of branch firewall and hub firewall in the SDWAN group managed through the panorama if i removed one particular firewall from the SDWAN group will it lost it's connectivity on the panorama

Panorama integration with NSX Localmanager invebtory

Hi, I want to enable access to NSX local manager inventory so that I can use the vm objects in firewall policy based on the NSX tags assigned to those VM's. I do not want a VM-firewall in NSX I just want the object definitions to use on physical firewalls, is this possible? I can see the plugin seems to indicate I can create a connec...

Resolved! ChatGPT User-ID, AD and IP mapping issue

There is an issue with Palo Alto firewall which has to do with user IP mapping and AD. User is grated access via policy in the format source-user = corp\employee. After that's done, the user works fine today accessing ChatGPT but then the user is not able to use chatgpt the next day after working fine the day before. What is the problem? Any in...

Data Redistribution Agent - system log message

Hi,In our Panorama system log I see a lot of logs giving the output shown below: Event: connect-agent-failure )Description: 'Redistribution Agent "data redistribution agent id"(vsys1): details: close connection to agent' I see this messages are coming in from all our firewalls and it started around 18 months ago.I tried to look through some docu...

Move Firewall from one Hierarchy device group/template to another hierarchy device group/template in panorama

Hi All, I want to move firewall(FW1) from one Hierarchy device group/template to another hierarchy device group/template in panorama. I Want to add destination device group default rulebase and remove source device group default rulebase . However local firewall rulebase should be retain   . Please help with best approach to achieve these .

Setup-Requirement.jpg
  • 736 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks