Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4912 Views
  • 0 replies
  • 0 Likes

Panorama Disk and logs confusion

I don't know where the logs are going as they do not show up in Panorama GUI for more than 10 days. ------------------------------------ Panorama has 2TB disk on top of 81G, and that is considerable amount of storage. Log storage only shows 13G available of which 10G is actually used. And this results in about 10 days of logs in GUI ---...

image.png
image.png
image.png
raji_toor by L4 Transporter
  • 3685 Views
  • 1 replies
  • 0 Likes

Setting up syslog forwarding from Panorama to Microsoft Cloud app security

Wondering if anybody has gotten the syslog forwarding working from panorama traffic logs to Microsofts Cloud App security. Have followed every guide I can find and I have logs passing to the MS log collector, however the syslog connection drops regularly, and despite getting some traffic showing in Cloud Discovery on the CAS dashboard it's appro...

Resolved! Enter maintenence mode on ESXi VM

Panorama ESXi VM, from the CLI I used "request system private-data-reset" and now I'm unable to login using the original local admin or the default admin. When I reboot the VM I do not see "enter maint..." command nor can I SSH or get in to "debug system maintenance-mode". How can I factory reset the VM using MRT or any other method?

Resolved! Cannot connect Log Collector to Panorama

Going mad here trying to connect a dedicated log collector to a Panorama HA pair. Followed this procedure https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector I get a far as step 12, but after the commit it never reports con...

Deploying already existing firewalls

Hi all, I've been working with Panorama now for just over a month, learning most its concepts slowly but surely. I am now stuck however on the following: Before we acquired Panorama, we had several clients running PA-220s. After it was announced the 220s were reaching EoL, we replaced most with 410s and 440s. We then acquired Panorama to cen...

Resolved! Panorama Settings Auth key limited to 80 characters

I'm trying to import an HA pair of PA-410s(10.1.3) in to Panorama(10.1.3-h). I follow the instructions to generate a device Registration Auth Key. When I try to copy the key in to the Panorama Settings of the firewall, the firewall tells me "the maximum length for this field is 80". How do I get the firewall to accept the key, or Panorama to ge...

ssassin by L1 Bithead
  • 5263 Views
  • 1 replies
  • 0 Likes

How to move firewalls between Panoramas

All NGFWs within a company are currently managed centrally from a central Panorama. The question is how to move a subsidiary's (business unit's) NGFWs and all related configurations (device groups, templates, template stackss, shared objects, etc.) from this central Panorama to a new Panorama installed locally at the subsidiary? We couldn't find...

Severity 3 message in Panorama managed Prisma Access for reports. mail send: attach file found:/tmp/pdf-email-scheduler

We receive emails for our reports but content is empty. (PDF,CSV, etc..) At the same time the reports go out around 2am (Central Time), we get a Severity 3 error message : mail send: attach file found:/tmp/pdf-email-schedulerxxxxxxxxThis is for every custom report we create. When we generate the report locally on Panorama it works with the pr...

jsnowden by L1 Bithead
  • 1680 Views
  • 0 replies
  • 0 Likes

HA cluster status 'cluster-unknown'

Hi all, I'm in the process of importing a number of firewalls into Panorama. I've also setup one new FW HA cluster from scratch using Panorama. All the firewalls imported into Panorama show a HA cluster state of 'cluster-unknown' in Panorama -> Managed Devices -> Summary. The one FW HA cluster built new from Panorama does not show this...

stuartr by L0 Member
  • 6602 Views
  • 3 replies
  • 1 Likes

Increase Disk Panorama VM

Hello everyone.Anyone can help me to increase the panorama VM Storage?I was increased in Hardisk in VM ESXI but when I am to clone to disk, the output is "unsupported target disk size of 1000.0 GB. Disk size must be 224.0 GB" the exiting disk space like this : @panorama> show system disk details Name : sdbState : PresentSize : 1024000 MB St...

Azis13 by L1 Bithead
  • 6216 Views
  • 5 replies
  • 0 Likes

Panorama - Untrusted TLS/SSL server X.509 certificate Vulnerability

Hi All, My Panorama was scanned by Rapid7 and we received this vulnerability "Untrusted TLS/SSL server X.509 certificate" More info here: https://www.rapid7.com/db/vulnerabilities/tls-untrusted-ca/ TAC hasn't been able to figure it out but so far we made sure the IP and FQDN are both on the certificate. Ensure that the device certificate is ...

NevinN by L0 Member
  • 3134 Views
  • 0 replies
  • 1 Likes

Custom report not listing hostnames

I have a custom traffic report which lists source address, dest address, application, and sessions. The web page result of the report populates 'source host name' and 'destination host name' results with names - either address object names or FQDN resolved names. However, when i export the report as PDF or CSV it just lists IP addresses instead ...

Panorama Device Push Fails

I am unable to push new configurations to our connected firewalls. It seems to be related to the addition of RADIUS administrators. I can log in with the local admin but even that user can't force the changes through. Here is an example of the error I am getting. Now, I noticed an issue where my auth profile was listed in panorama as shared in...

Resolved! Firewall Disconnected from Secondary Panorama

Added some new firewalls to a Panorama HA pair and one of the devices is disconnected from the secondary Panorama. admin@intra-az1> show panorama-status Panorama Server 1 : 10.201.24.12 Connected : yes HA state : Active Panorama Server 2 : 10.201.25.12 Connected : no HA state : disconnected Running tcpd...

  • 853 Posts
  • 47 Subscriptions
Top Liked Authors