Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4905 Views
  • 0 replies
  • 0 Likes

log retention is very short

Using the 'show system logdb-quota' command on my Panorama 10.1.5 system, it lists Current Retention days as very short for several of the logs. For example, threat logs are listed as having 12 days worth. I have 64GB of disk allocated to threat logs. If i export the entire threat log, i see only 80000 entries. PA are investigating why the logs...

Error con la conexion de firewall con Panorama

Se realiza conexión con 3 firewall (uno de ellos de manera local), se revisan la configuracion y estan correctas pero no es posible conectar con el firewall en panorama. Se anexa imagen de la situacion actual de los firewall. Gracias.Please note you are posting a public message where community members and experts can provide assistance. Shar...

Hide/show local configuration objects

Was running 9.1 on all firewalls. 10.0 on Panorama. Then something stupid happened and couldn't sync my HA pairs. I was forced to upgrade everything to 10.1.5. In the name of all that's stupid, on my local firewalls, when I log in, it shows me both the locally configured ipsec tunnel and the panorama configured tunnel object (the green gear)...

treysgrun_0-1654902933046.png

How to onboard palo in to panorama

Hi Team, Our palo already onboarded in to the panorama. Due to some reason our L3 team disabled panorama setting in the palo. Now we need to re-add in to the panorama. Please tell me how need to do? 1. Palo we need to enable pano setting only enough 2. or we need to import the config in the panorama as well ?

rbabu0 by L1 Bithead
  • 3325 Views
  • 1 replies
  • 0 Likes

Panorama Collector Log Forwarding not working

I noticed an issue with this feature before when I tried to set up an outgoing email on the Correlated Events log settings in the Panorama built-in collector group. My idea was to filter to certain networks and then send an email when a correlated event came in that matched the filter so that a ticket could be created and our desktop services f...

jsalmans by L4 Transporter
  • 2988 Views
  • 1 replies
  • 0 Likes

Resolved! Importing and Managing Shared Gateway in Panorama

Does Panorama support managing shared-gateways? I found one unanswered post on it, but I haven't found a conclusive statement on it in the official documentation. I recently tried to import a firewall into Panorama, but sg1 didn't seem to import with the rest of the vsys(s).

Automatically assign and/or quick method to multiple ( 500+ ) security policies the log forwarding profile.

Automatically assign and/or quick method to multiple ( 500+ ) security policies the log forwarding profile. Dear, good afternoon. Please help me to review the following: I have some firewalls managed by Panorama, firewall that at Device Group level have approx more than 500 security policies, some even reaching 2000. How is it poss...

Metgatz by L4 Transporter
  • 1643 Views
  • 0 replies
  • 0 Likes

question about panorama and proxy server

Hi,Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on th...

Resolved! Service object injected from Panorama, local view on firewall says destination port [ object Object ].

Service object injected from Panorama, local view on firewall says destination port [ object Object ]. Thank you very much as always. Can you support and help me by confirming if this is completely normal behavior. I have a Panorama and I am injecting a new service to two firewalls in HA that share the same Template/Template Stack. Well ...

Destination_Port.png
2022-07-10 18_00_22-PA-VM.png
from_panorama.png
Metgatz by L4 Transporter
  • 3896 Views
  • 4 replies
  • 0 Likes

Panorama - Force Template Value Option

Hello good evening: As always, thank you very much for the support, collaboration, support and help. I have the following important question regarding a PANORAMA function, in relation to the "Forced Template Values" option.According to the documentation, this option performs the following function:Merge with Cadidate Config = Option to merge t...

Metgatz by L4 Transporter
  • 16973 Views
  • 1 replies
  • 0 Likes

Panorama 10.1.6 wants to push keys and secret every time

Hi all, I want to upgrade my Panorama, 220s and 3220s from 10.0.10 to 10.1.6. I started upgrading Panorama and a 3220 HA Active Passive Pair to 10.1.6 No issues during update. When I want to push config to devices, I notice that the 3220s are shown "in sync", but when I go to the diffs, it always wants to push modified keys and secrets: IPSec Tu...

DVB_Bank by L1 Bithead
  • 2123 Views
  • 1 replies
  • 0 Likes

Panorama Template Push to Firewall always fails, unless you push Device Group at the same time

Panorama - VM ESXi - Panorama mode - version 10.1.4 When Panorama Template Push to Firewall always this always fails, reports out of sync and when you log directly to the firewall you do not see the changes. When you push Device Group and the Template from Panorama to the firewalls, the Template changes are successfully. The options enabl...

CarlUK by L0 Member
  • 4354 Views
  • 2 replies
  • 0 Likes

Resolved! Duplicate config in panorama managed firewall

Hi Team, In my firewall i can 2 configuration at the same time. One i pushed from panorama and one is local that is scyronized from the passive peer. i can see everything is duplicate. How can i remove the duplicate config ( Local config from the firewall and keep the panorama pushed only. Thanks in advance

  • 853 Posts
  • 47 Subscriptions
Top Liked Authors