Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4842 Views
  • 0 replies
  • 0 Likes

Panorama logs - using local Panorama VM disk for logging - unable to view logs from firewalls prior to 00:29

I have Panorama VM running in "Panorama mode" on VM ESXi, version 10.1.4 I have configured "managed Collector" to be Panorama, and diskA (which is a 2TB disk) with a "Collector Group" for 1x HA firewalls to send logs to When i view the logs in Panorama, i see the logs from the firewall devices, but i never see the logs from the previous day...

CarlUK by L0 Member
  • 2409 Views
  • 1 replies
  • 0 Likes

Resolved! Log forwarding to syslog server from Panorama or Firewall

Hello everyone, I have a question for log traffic and forwarding to syslog server. I have one panorama that managed a firewall pa-5250 and I see log traffic on two devices. But when I want to forward it to a syslog, I have to forward panorama's log or firewall pa-5250's log ? Thank's in advance !!

EndritK by L0 Member
  • 5489 Views
  • 2 replies
  • 0 Likes

Logs from secondary Panorama

Hello Team, We are having two panorama's configured in HA. As of now all the traffic is been handled by Primary Panorama and secondary is on handby. Now can we use the secondary panorama for log collection to decrease the CPU on primary? if so kindly let us know how ?

Goutham by L0 Member
  • 2217 Views
  • 1 replies
  • 0 Likes

Resolved! Referencing items in a template that are defined in another template.

I have one template that had most of my default settings that get pushed to all my firewalls. In this template, I have defined authentication profiles. I have another template that I am using to push Global Protect Portal/gateway settings to a firewall. Both of these templates are in the same template stack. The problem I am having is th...

RHuss1 by L1 Bithead
  • 6379 Views
  • 2 replies
  • 0 Likes

Resolved! Gets "import -> network -> logical-router unexpected here" when push to device

Hi, I did a factory reset and upgraded my PA-220 to 9.1.12-h3. Installed device certificate and licenses. No interface, no policys, just a clean firewall. Connected successfully it to my Panorama 10.1.3-h31 and successfully made an import. When doing an export I get: Validation Error:import -> network -> logical-router unexpected hereimp...

Panorama Template Address Object Caveat

When trying to migrate a HA pair of PA 3250's into Panorama 10.1, address objects used for BGP Remote Peers aren't supported. Objects were imported to Panorama Shared location using Device import process. Address Objects either in a specific Device Group or the Shared location are not listed when trying to configure a BGP Peer. Images included ...

Address Objects.JPG
BGP.JPG
benlewis by L2 Linker
  • 1600 Views
  • 0 replies
  • 0 Likes

Hide My Ass VPN

Do we know if Palo Alto Panorama/5520 Firewalls recognise the "Hide My Ass" VPN application? I've done a search Objects/Applications but it does not show anything from what i can see. Thanks

Issue with forwarding logs to Panorama

Hi Folks, We have PA-7000 series firewall configured to forward logs to Panorama. Recently the firewall stopped forwarding logs to Panorama. In the logrcvr msg we could see the below output. Here the 10.0.2.250 is the Panorama and the 10.0.2.252 is the firewall. On the panorama device summary we could see that the firewall is showing as co...

Log Forwarding to Panorama Not Working

So apparently I must be missing something. I configured Log Forwarding to send it to my Panorama instance, so that when I click on Monitor I can click and view the logs but apparently none of my logs are showing up in Panorama. They show up find on the firewalls but not in Panorama. I have made sure that all my Log Forwarding profiles have i...

Commit gets: GlobalProtect App Dynamic Configuration misses information for 'log-gateway'

Hi all, On all my firewalls on 9.1.x I get this when I commit from panorama 10.1.3-h3. 10.x.x firewalls does not get this error message: GlobalProtect App Dynamic Configuration misses information for 'log-gateway'.GlobalProtect App Dynamic Configuration misses information for 'quarantine-add-message'.GlobalProtect App Dynamic Configuration mis...

managing digital certificates and globalprotect gw certificate with panorama for vm series firewall

I am managing two vm series palos deployed in azure with panorama with active active configuration. All configurations are synced with panorama and everything works except the certificates. I just not getting how to set up certificates for both firewalls individually for both gui access and for globalprotect. I have searched but cant find a solu...

AWS Panorama Instance Upgrade - Cannot Login

I recently tried to upgrade my AWS Panorama instance from t2.xlarge to c5.4xlarge. When I started the instance back up the web interface did not work. So then I tried to ssh into the instance and it denies any login attempts. Any assistance would be greatly appreciated.

addawes by L1 Bithead
  • 1557 Views
  • 0 replies
  • 0 Likes

want to add third panorama in collector group for logging

In current setup we have Panorama M200 in HA pair and managing location A and location B firewall centrally. We have enabled local log collector on both Panorama and added in same collector group with redundancy enabled. Also log forwarding preference is enabled , in which location A firewalls sending logs to Primary-Active Panorama and location...

Deepak25_0-1646954254120.png
Deepak25 by L3 Networker
  • 4006 Views
  • 3 replies
  • 0 Likes
  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors