question about panorama and proxy server

Hi，Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on th...

Panorama - Force Template Value Option

Hello good evening: As always, thank you very much for the support, collaboration, support and help. I have the following important question regarding a PANORAMA function, in relation to the "Forced Template Values" option.According to the documentation, this option performs the following function:Merge with Cadidate Config = Option to merge t...

Panorama 10.1.6 wants to push keys and secret every time

Hi all, I want to upgrade my Panorama, 220s and 3220s from 10.0.10 to 10.1.6. I started upgrading Panorama and a 3220 HA Active Passive Pair to 10.1.6 No issues during update. When I want to push config to devices, I notice that the 3220s are shown "in sync", but when I go to the diffs, it always wants to push modified keys and secrets: IPSec Tu...

Panorama Template Push to Firewall always fails, unless you push Device Group at the same time

Panorama - VM ESXi - Panorama mode - version 10.1.4 When Panorama Template Push to Firewall always this always fails, reports out of sync and when you log directly to the firewall you do not see the changes. When you push Device Group and the Template from Panorama to the firewalls, the Template changes are successfully. The options enabl...

Add Shared Gateway FW into Panorama

I am trying to add a stand alone fw into Panorama, v 10.0.8. After I add the device in Pan and commit , the device shows as connected. I then import the config which includes a shared gateway. When I commit the config in Pan I receive an error message that suggests duplicate UUID's found and the commit fails - see attached. I don't see a shared ...

Panorama template section is empty : No interfaces, no zones

Hello team, I have 2 firewalls managed in my panorama. When I go to template section on Panorama I can not see anything, any interfaces, zones so it's not possible to make any change from the Panorama. I have to make changes directely on the firewall. Do you know how can I fix out this issue ? Kind regards

Is it possible to exclude a particular IP from forwarding logs to the syslog server, that too particularly deny logs for that IP

Bulk add existing addresses to an existing group

Hello,I'm hoping someone can help out. I've just finished a merge from an ASA to Palo Alto through Expedition. The ASA had 3000+ addresses as part of an existing address group. I've tried multiple times to merge, and push the changes through the API, but it would appear all the addresses don't show up in the group.I guess what I'm asking, is ...

Postponing Logdb Migration

I have a Legacy mode Panorama virtual appliance running PANOS 8.1 that I am planning on upgrading to 10.2. Would the below order of operations be a valid approach or does logdb migration NEED to occur before performing PANOS upgrades? 1. Perform Panorama mode conversion (adding resources etc.), but not logdb migration. 2. Perform PANOS Upgrade...

Shared RADIUS Server Profile, and Shared Authentication profile not showing up in a new Template?

Hi Friends, Please note that I have a Panorama running version 10.1.5-h1, and I just registered a couple of new PA-440 Palos which have the same software version 10.1.5-h1. I also provisioned it's corresponding Template Stack, Device Group, and pushed everything successfully to those new firewalls. However, my weird thing is that I should be abl...

Panorama log disk migration error - 10.1.5-h2

Hi All, We want to move Panorama's log disk from a passthrough iSCSI disk to a local VHDX (Hyper-V). We've tried cloning the volume, but Panorama wipes the data because it initializes the disk. If we try to start the log migration from the CLI we get Error restoring disks from RMAed device. (as described in PAN-105012, but not applicable to pa...