Managed PAs system log filtering and email alert on Panorama

If PAs are managed with Panorama and PAs are configured for log forwarding to Panorama. On Panorama > Log settings, Filter can be added for PAs system logs, logs can be seen on 'view filtered logs' as well. but email alerts are not generated. Only Pa

Error exceeds capacity

Hi All,

We been having few commit failures on some of the devices either for security policy, decryption policy or for profile.

While I can run the command " show system state filter cfg.general.max* " to display the max or threshold and commands

Address book has no value

When I click on an address book entry in the GUI to view it's value it just says "There is no value for the selected item". It looks like a regular address book but there is no address book found under Objects->Addresses and this can be seen from the

XML API: Panorama: How to Create/Get/Update the field "Audit Comment" of a Security Policy rule?

Settings

• Panorama version: 10.1 (latest)
• When creating/updating a Security Policy rule (see attached images for more info), I'm able to add/update Audit comment for a rule via Web browser by following this guide https://docs.paloaltonetworks.com/pan-o

Panorama - Wrong Password Hashes/Salts After Migration To Panorama

Hi everybody,

I noticed something when migration stand alone firewalls to panorama managed. 
In the past, I had multiple customers where I needed to migrate the local firewall configuration to panorama managed and I am allways following the official

One log collector can connect with two Panorama Mangement?

WE have plan to migrate M100 ( Management Only mode ) to M200 ( Management Only mode ).

Old system have 2 appliance

        M100 ( Management Only mode ) connect to M500 (Log Collector mode)

Can I connect M100 and M200 to same M500 (Log Collector m

My struggles with panorama

Sometimes I feel Panorama is a great tool, sometimes I rather manage firewalls locally and just API for mass pushes and deployments.

I had a firewall that was overridden in a few places and wanted to get this back in sync with panorama. So I follow

Security rules in Active Passive Panorama

Hi There, 

I have two A/A firewall pairs in Primary Azure locations (WEU) and two A/A firewall pair in DR azure location(NEU).

And I have setup Panorama in Active & Passive mode.

In DR scenario I am aware that, WEU Panorama failover and fall back t

SSH export is using temp location which is not defined

Lately we are having issue with SSH export bundle on Panorama. we have specified location /abc/abc/abc however in the system logs we can see logs as /tmp/pan/<file_name>: No such file or directory.

tried resetting the config still same issue. 

Pa

Push to an HA passive PA causes active PA IPSec tunnel to drop, sync is off

After importing configs from an HA pair running 10.1.3 (for the features), and after merging the device groups and templates, we push the newly merged templates back out to the passive member.  So far, so good.  Then suspend to flip the active and pa

Post Panorama Upgrade to 9.1.12-h4, unable to Commit-Verify to firewalls

I completed the upgrade of Panorama from 8.1.18->8.1.21->9.0(dl)->9.0.15->9.1.0(dl)->9.1.12-h4.  Seemed to go fine.  After the upgrade, all firewalls listed in the Panorama-Summary tab are Out of Sync.  Expected to have to Commit to all of the firewa

Panorama Rest API - Add ae subinterface

Hello everyone!

I am planning to create around 200 new subnets on my firewall managed by Panorama template. We plan to restructure our network.

I want to do this via the Rest API of Panorama. I was able to create a ae interface via the API, no proble