This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 5068 Views
  • 0 replies
  • 0 Likes

managing digital certificates and globalprotect gw certificate with panorama for vm series firewall

I am managing two vm series palos deployed in azure with panorama with active active configuration. All configurations are synced with panorama and everything works except the certificates. I just not getting how to set up certificates for both firewalls individually for both gui access and for globalprotect. I have searched but cant find a solu...

want to add third panorama in collector group for logging

In current setup we have Panorama M200 in HA pair and managing location A and location B firewall centrally. We have enabled local log collector on both Panorama and added in same collector group with redundancy enabled. Also log forwarding preference is enabled , in which location A firewalls sending logs to Primary-Active Panorama and location...

Deepak25_0-1646954254120.png
Deepak25 by • L3 Networker
  • 4324 Views
  • 3 replies
  • 0 Likes

delete all logs from panorama

Our Panorama M600 is in a weird state with regards to logging. pushing configs to devices is just fine, but es-health is red and has been for the last few days. Thought it was rebuilding but sure looks like it's totally broken. We are thinking of wiping all data and starting from scratch (which is okay since we have logs on the firewalls to fa...

czane by • L1 Bithead
  • 6078 Views
  • 4 replies
  • 0 Likes

Firewall not sending logs to correct log collector

Hi Friends, Firewall not sending logs to correct log collector, hence i followed the KB article. Firewall not sending logs to correct log collector - Knowledge Base - Palo Alto Networks But still same issue hence i say one more URL based on that executed delete log-collector preference-list. After that new panorama i am receiving logs. But is...

rbabu0 by • L1 Bithead
  • 3471 Views
  • 2 replies
  • 0 Likes

Change Name of active Zones or Replace

Hi, we want to change the name from some active Zones that are active in policies. If we change the name than panormama display an error message. Is it possible and how, to change the name of a Zone oder replace it with a new one with the new name?

Resolved! TAGs for the use of Dynamic Address Group created on PANORAMAare not deployed to the firewalls if they are not used in some explicit way in the policy

I tell you the problem that we have detected today, with PANORAMA and our FWs,the objects that we are using through TAGs for the use of Dynamic Address Group are not deployed to the firewalls if they are not used in some explicit way in the policy. Do you know how it can be done so that it is shown?any idea?Greetings.

Alpalo by • L4 Transporter
  • 3537 Views
  • 2 replies
  • 0 Likes

Managed PAs system log filtering and email alert on Panorama

If PAs are managed with Panorama and PAs are configured for log forwarding to Panorama. On Panorama > Log settings, Filter can be added for PAs system logs, logs can be seen on 'view filtered logs' as well. but email alerts are not generated. Only Panorama-based events are sent in email. If log settings are only for panorama system logs, then...

b.nazir by • L0 Member
  • 6206 Views
  • 4 replies
  • 0 Likes

Resolved! VR Configuration for Tunnel not pushing

Hi Team, When I tried to create a tunnel interface from Panorama to push to the Managed device, But after the push the VR configuration is not reflected in the Managed device the VR showing none. But when I check in panorama the interface it properly attached with a VR and showing properly, There is no Commit error, We tried to ...

SubaMuthuram_0-1645769601083.png
SubaMuthuram_1-1645769984012.png

XML API: Panorama: How to Create/Get/Update the field "Audit Comment" of a Security Policy rule?

Settings Panorama version: 10.1 (latest) When creating/updating a Security Policy rule (see attached images for more info), I'm able to add/update Audit comment for a rule via Web browser by following this guide https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/policies/audit-comment-archive.html . However, I fail to use X...

HermanEdwards_1-1645745621315.png
HermanEdwards_0-1645745433474.png

Panorama - Wrong Password Hashes/Salts After Migration To Panorama

Hi everybody, I noticed something when migration stand alone firewalls to panorama managed. In the past, I had multiple customers where I needed to migrate the local firewall configuration to panorama managed and I am allways following the official documentation here: https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/manage-firewa...

SSH export is using temp location which is not defined

Lately we are having issue with SSH export bundle on Panorama. we have specified location /abc/abc/abc however in the system logs we can see logs as /tmp/pan/<file_name>: No such file or directory. tried resetting the config still same issue. Panoram version 9.1.12-h3

aggarwat by • L1 Bithead
  • 2807 Views
  • 1 replies
  • 0 Likes

Post Panorama Upgrade to 9.1.12-h4, unable to Commit-Verify to firewalls

I completed the upgrade of Panorama from 8.1.18->8.1.21->9.0(dl)->9.0.15->9.1.0(dl)->9.1.12-h4. Seemed to go fine. After the upgrade, all firewalls listed in the Panorama-Summary tab are Out of Sync. Expected to have to Commit to all of the firewalls. However, when I did a Commit-Verify, in order to verify these, it started al...

Scheduled Backup/Export

So I have panorama backing up to ftp, all works well, but I noticed it doesn’t ever clean up the backups? Can we tell it how many copies/days to keep somewhere. It is not a huge amount of data but I have exports daring back over a year and will never go back to those.

bschaper by • L2 Linker
  • 3472 Views
  • 3 replies
  • 0 Likes
  • 728 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks