Panorama Discussions | Palo Alto Networks

So.... Crimea is gone?

Was trying to commit some shared objects and getting an interesting error:

Validation Error:
shared -> pre-rulebase -> security -> rules -> GeoBlocking_Outbound -> destination 'CE' is not an allowed keyword
shared -> pre-rulebase -> security -> rules

...

Resolved! Dynamic apps and threats update failed for pattern 8510

We're running a PA-820 physical FW at software level 9.1.12-h3.

I tried to manually update the apps and threats pattern published this morning (as we only update daily and it was published about 30 minutes after our system automatically checks).

Down

...

Resolved! Panorama log-collector

We have two panorama and newly upgraded to 10.1.3.-h1 and HA and Panorama mode.

One log-collector group and two log-collectors .

All devices are have them in prefer-list

one of log-collectors has 0% avg log/sec . is it normal ?

Resolved! Question about connection ID Panorama lr or ms

Hello team,

What is difference between ID connection ms and lr?

I see that daemon is different but I don't undestand the difference between both, Anybody has a sk or similar for I can understand it?

I want to confirm that the forwarding is work

...

Resolved! Need to upgrade the Panorama version to 9.1.12-h3 to mitigate log4j vulnerability

Hi Team,

We are running Panorama on VM-Ware ESXI. We need to install 9.1.12 -h3 version but whlle going to software session to download 9.1.13 h3 we could see multiple PAN-OS versions in 9.1.12-h3 itself.

Could anyone let us know which OS-Version

...

Managing HA Settings of firewall locally instead of managing it from Panorama

Hi Folks,

We had recently migrated HA firewall to Panorama using the below documentation

Migrate a Firewall HA Pair to Panorama Management:

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/manage-firewalls/transition-a-firewall-t

...

worldarchitecturenews.com is blocked in URL filtering by news category

The URL: worldarchitecturenews.com

was earlier accessible through port 80 but later on it migrated to port : 443 and it became inaccessible. Giving block page when trying to access the URL. The URL is blocked under news category with no Applicatio

...

Packet Deny even if there is an allow rule

Hello,

we're encountred an issue with SAAS service, we created a security rule

but randomly we had issue during connection into the application, after packet capture, I saw a lot of tcp retransmission and client reset

When I checked the pa

...

Resolved! HTTP Response traffic

Hi guys, I have been seeing that when making an http connection that goes through the PA firewall, the request is logged, but the return message is not, that is, when in panorama I filter the traffic by source ip I see the http request but I do not s

...

Resolved! Failure to Commit changes in Panorama after removing a firewall as managed device

I removed a firewall that is managed through Panorama by going to Panorama > Managed Devices > Summary, selecting my firewall then selecting delete. This removed the firewall for me succesfully. However, when I go to make a Commit in Panorama it thro

...

Log4j

What would I look for in logs if I were looking to see we had already been owned by this?

Because of CVE-2021-44228, need to upgrade Panorama

Managed Palo Alto firewalls are running 9.1.11 and are unaffected by CVE-2021-44228 but Panorama running 9.1.11 is. If I upgrade Panorama to 10.1.2, will I have any problem with it seeing and managing the managed Palo's still running 9.1.11?

Panorama upgrade to 10.1.3-h

Panorama mgmt has been upgraded from 9.1.10 to 10.0.0 and then to 10.1.3-h. Post the upgrade, logs are not showing up in the monitor and not able to commit any changes.

Palo alto firewalls are running with 9.1.6 version; is it a compatibility issue

...

Resolved! New Object not showing in Panorama

Hello,

We are trying to build templates with IP addresses that are relevant to a device group.

I have created a TEST_TEMPLATE under Panorama>Templates with NO devices added yet.

Then created 'CORP' in the Device Groups.

After this, created a device gr

...

Resolved! CVE-2021-44228 / Panorama

As most are aware, Panorama running 9.x are affected by log4j vulnerability. The security advisory mentions "This issue is only applicable to Panorama hardware and virtual appliances that have run in Panorama Mode or Log Collector Mode as part of a

...

Discussions

So.... Crimea is gone?