Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

show system resources | match mgmtsrvr output

I am having issues with panorama processing log. Upon investigation, I see this: (primary-active)> show system resources | match mgmt16396 20 0 2944028 1.266g 8496 S 0.0 2.0 4573:26 mgmtsrvr Does it mean that the mgmtsrvr is consuming a lot of memory? Thoughts?

Panorama commit failed - Configuration is invalid

hi guys,wondering if anybody has experienced this issue before. I imported the firewall config to Panorama and now trying to push it to the firewall. The issue is that when I try to push the template config, it gets failed with Configuration is invalid. It does not give more details to troubleshoot. Thanks,

Resolved! Unable to Delete Delete all from HA Settings in Panorama.

Hi team, I am unable to delete all HA Settings in the Panorama template in the getting error. screenshot attached.

Adding zones in Panorama

Hello everyone, I have question. I inherited a few firewalls that are partially managed by Panorama, meaning I have objects and other items pushed to the firewall from Panorama but mostly everything else is local. On the local firewall, contains all firewall rules, zones, interfaces are configured with ip addresses. The other firewalls are fu...

Panorama shared-policy-md5sum

Do you know what data is behind "shared-policy-md5sum" field for Panorama connected devices?It can be seen in the Panorama CLI output form the command "> show devices connected" and in the equivalent operational API call. I am working on an automation for collecting firewall data in Panorama and I need a way to match a firewall serial/vsys ...

Resolved! Error when upgrading Panorama to 10.0.7

Hi All, I have a client trying to update Panorama VM in ESXi from PAN OS 9.1.10 to 10.0.7 and they are receiving the below error:Looking at the show system disk-space command they do not have 80 GB collectively available, but their system disk is 280 GB. Also, looking at the tech support file I do see their is a section of memory in red called w...

Resolved! Restore Panorama

Hi, I'm trying to understand the process for restoring a Panorama (virtual appliance). For example, say for whatever reason the Panorama appliance won't boot. - How to backup the entire configuration for the restore ? Is this the option from Panorama > Setup > Operation > Export named Panorama configuration snapshot?- If the above is...

Panorama VM Registration

Hi Everyone, I have deployed a panorama vm, but I am unable to register it. I am getting the below error :CSSP Device Registration Error

Panorama and Firewall frequent disconnection

Hi Team, I'm facing issue where firewall and Panorama keeping disconnected every minute. It is getting connected and disconnecting. This happens within a minute, I have checked the reachability is fine between panoraman and firewall and port is open. I'm seeing in system logs TLS session disconnected not sure but again it is connecting. PAN OS 8...

Resolved! Fastest way to commit Panorama changes

Hey All, I have a customer who has about 50 PA FW's and Panorama. They will be using Cyberark to rotate passwords on service accounts, the account that the FW's are using for LAPD will be changing. Cyberark will make and replicate its change very fast but the FW commits will take way longer and USER ID will break as soon as the change is made. I...

Resolved! Panorama Azure VM monitoring

Has anyone implemented this successfully. Below screenshots from Azure config Service PrincipalSecretAPI permissionUnder Enterprise Apps it shows my username, but it should not need a user ??? Reader role at subscription Panorama ConfigErrorno log file

Resolved! Panorama compatibility

Hi Panorama could manage firewalls with versions far from the actual? Means if I have a Panorama running version 10.0.x, can I manage my firewalls running 8.0.x, 8.1.x, 9.0.x? or how many previous version could manage?

The device deployment license of panorama does not normally display the license information of the two devices

The customer has six devices, all of which have activated license. The customer wants to update the feature library through panorama, but finds that two of them do not see the license information on panorama. What do you suggest and how to troubleshoot?

Resolved! what is the best way to import backup into secondary RMA panorama M200

We RMA secondary Panorama M200 , currently we don't have backup of Secondary panorama. But Primary M200 is accessible.Which backup will be better option to export from Primary Panorama and import into Secondary Panorama ? 1. Export named Panorama configuration snapshot without selecting device groups and templates. size : 8191 kb or2. Export nam...

Palo Alto API application description?

Is there a way to access the application description through Palo Alto's api? Specifically panoramas?