Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 5068 Views
  • 0 replies
  • 0 Likes

Resolved! Traffic logs are not shown on the Panorama monitor tab

I configured Panorama 10.1.2 in panorama mode as a dedicated log collector with a 2TB disk.I then added a VM 10.1.2 as manged firewall. I can configure the firewall but I do not receive the logs on the monitor tab: 1. Managed Collector in sync but in statistics I have disk status unavailable: 2. On the CLI instead:   I kindly ask you for...

statistics.png
cli_disk.png

Disable ARP entry for outside interface

Hi Team, As per the ISP request, I need to disable ARP entry for my palo alto outside interface. Please suggest me how to proceed. Palo alto outside interface connected with ISP, as per their request we need to disable ARP entry on that interface. Please let us know how to disable. Its very urgent.

rbabu0 by L1 Bithead
  • 6190 Views
  • 5 replies
  • 0 Likes

Panorama Manager of Managers

I've been tasked with looking into and understanding how the Panorama Manager of Manager architecture works. I have had no luck in finding any documentation or tutorials on it, but our SE team has talked about it a few times. Has anyone had any first-hand experience in setting up and administering Panorama in this architecture? If so, could you ...

tominak by L0 Member
  • 2553 Views
  • 1 replies
  • 0 Likes

Panorama VM upgrade to PANOS 8.0.x & switch mode to Panorama Mode

Hi, This is my feedback experience after two weeks of migration process and troubleshooting moving to Panorama 8.0.7 in Panorama Mode. The most part of the process is available from the Panorama 8.0 Administrator's Guide 8.0 but I noticed a lack of information for certain steps. I hope that can help the next adventurers. #Existing configuration...

FRVSA by L1 Bithead
  • 50313 Views
  • 13 replies
  • 14 Likes

Panorama collector statistic

Anyone tell me what the day mean in Managed collector > statistics > oldest log ? I just checked the day and I found something is weird. 1) when I checked it less than 7 days , it almost matched with current local times 2) And oldest log day is increased a day per day , but i can't see traffic log over 8 days from current local time.

JeffKim_0-1643386696390.png
JeffKim by L2 Linker
  • 2314 Views
  • 1 replies
  • 0 Likes

Has anyone used Panorama to import a configuration from HA 5060s to use on new generation 5450s?

Goal is to replicate the current configuration from production 5060 firewalls to replacement 5450s firewalls. The intent is to use Panorama to bridge the OS difference between the 5060s (highest os 8.1.x) and 5450s (start with 10.1.x). The 5060s are HA and on panorama for object sharing but the policies (security, nat, pbf) are localized. Bot...

Resolved! Can't commit from Panorama due to mis-match Vsys number between Pan and local box

wanted to know if anyone has ever experienced this issue. recently configured a new Vsys "Vsys6" which was successfully added to the correct Template_stack and device groups. everything worked fine for 2-3 weeks, however last night after adding 2 Sec.policies to the new Vsys. the commit failed. FYI for security i've edited the zone names and pol...

Resolved! Exact Log4J version on Panorama 9.0.15

Hello everyone, I just upgraded our Panorama servers to 9.0.15, but our SOC team is asking to know the exact log4j version included in this hotfix release, because they want all appliances to be upgraded to log4j 2.16. According to this page (https://docs.paloaltonetworks.com/oss-listings/panorama-oss-listings/panorama-9-0-open-source-softwa...

grenzi by L3 Networker
  • 3075 Views
  • 1 replies
  • 0 Likes

Resolved! want to add third log collector in Panorama HA

We have two panorama (M200) in HA with single collector group , local log collector of both panorama we have added in same collector group and enabled redundancy.Due to low disk-space we want to add one more log collector. So there will be three log-collector in same LC group. Can I add third LC ,( if Panorama in HA and already added LC's are pa...

Deepak25 by L3 Networker
  • 5551 Views
  • 7 replies
  • 0 Likes

Resolved! Restore Panorama after hardware failure

How do I restore Panorama configuration? I do a "Scheduled Config Export" every night. Old Panorama VM had to be rebuilt from scratch. No access to old VM. I have rebuilt the VM from OVA. When I try to "Import name Panorama configuration snapshot" per restore documents I get an error that the file is not an .xml. What is the procedure to use...

Joel_W by L1 Bithead
  • 7521 Views
  • 3 replies
  • 0 Likes

HIP-PROFILES IS A DUPLICATE NODE ERROR

Hello , I got a strange situation on my Panorama 10.0.7 software version . When i'm trying to push security policies from it to managed firewall from a lower OS version like 8.1.x i'm receiving this " hip-profiles is a duplicate node " error . As i understood after some researches is that Panorama is using this HIP-Profile feature , and the ...

Nicu21 by L1 Bithead
  • 2904 Views
  • 1 replies
  • 0 Likes

Is there a way to see all raw data collected by GlobalProtect APP ?

Hi, I see in the below document, that you need to create HIP Object/Profile to view the raw host data collected by the GlobalProtect APP. My question is there a way to skip this step and see all raw host data collected by GlobalProtect APP without defining the HIP object/profile ? https://docs.paloaltonetworks.com/globalprotect/9-1/globalprote...

saswins by L1 Bithead
  • 2373 Views
  • 1 replies
  • 0 Likes
  • 728 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Authors
Labels