Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Adding zones in Panorama

Hello everyone, I have question. I inherited a few firewalls that are partially managed by Panorama, meaning I have objects and other items pushed to the firewall from Panorama but mostly everything else is local. On the local firewall, contains all firewall rules, zones, interfaces are configured with ip addresses. The other firewalls are fu...

Panorama shared-policy-md5sum

Do you know what data is behind "shared-policy-md5sum" field for Panorama connected devices?It can be seen in the Panorama CLI output form the command "> show devices connected" and in the equivalent operational API call. I am working on an automation for collecting firewall data in Panorama and I need a way to match a firewall serial/vsys ...

Resolved! Error when upgrading Panorama to 10.0.7

Hi All, I have a client trying to update Panorama VM in ESXi from PAN OS 9.1.10 to 10.0.7 and they are receiving the below error:Looking at the show system disk-space command they do not have 80 GB collectively available, but their system disk is 280 GB. Also, looking at the tech support file I do see their is a section of memory in red called w...

Resolved! Restore Panorama

Hi, I'm trying to understand the process for restoring a Panorama (virtual appliance). For example, say for whatever reason the Panorama appliance won't boot. - How to backup the entire configuration for the restore ? Is this the option from Panorama > Setup > Operation > Export named Panorama configuration snapshot?- If the above is...

Panorama VM Registration

Hi Everyone, I have deployed a panorama vm, but I am unable to register it. I am getting the below error :CSSP Device Registration Error

Panorama and Firewall frequent disconnection

Hi Team, I'm facing issue where firewall and Panorama keeping disconnected every minute. It is getting connected and disconnecting. This happens within a minute, I have checked the reachability is fine between panoraman and firewall and port is open. I'm seeing in system logs TLS session disconnected not sure but again it is connecting. PAN OS 8...

Resolved! Fastest way to commit Panorama changes

Hey All, I have a customer who has about 50 PA FW's and Panorama. They will be using Cyberark to rotate passwords on service accounts, the account that the FW's are using for LAPD will be changing. Cyberark will make and replicate its change very fast but the FW commits will take way longer and USER ID will break as soon as the change is made. I...

Resolved! Panorama Azure VM monitoring

Has anyone implemented this successfully. Below screenshots from Azure config Service PrincipalSecretAPI permissionUnder Enterprise Apps it shows my username, but it should not need a user ??? Reader role at subscription Panorama ConfigErrorno log file

Resolved! Panorama compatibility

Hi Panorama could manage firewalls with versions far from the actual? Means if I have a Panorama running version 10.0.x, can I manage my firewalls running 8.0.x, 8.1.x, 9.0.x? or how many previous version could manage?

The device deployment license of panorama does not normally display the license information of the two devices

The customer has six devices, all of which have activated license. The customer wants to update the feature library through panorama, but finds that two of them do not see the license information on panorama. What do you suggest and how to troubleshoot?

Resolved! what is the best way to import backup into secondary RMA panorama M200

We RMA secondary Panorama M200 , currently we don't have backup of Secondary panorama. But Primary M200 is accessible.Which backup will be better option to export from Primary Panorama and import into Secondary Panorama ? 1. Export named Panorama configuration snapshot without selecting device groups and templates. size : 8191 kb or2. Export nam...

Palo Alto API application description?

Is there a way to access the application description through Palo Alto's api? Specifically panoramas?

Panorama upgrade local auth not working

Recently upgrade panorama to 8.0.17 and after it upgraded it got hung, so we had to reboot it to get it back. Once it was back it is no longer allowing local auth. Remote auth works via the GUI (thankfully). Neither local or remote auth works via cli (console doesn't work either). SSH using LDAP I get this message: Received disconnect from 10...

Upgrading Panorama

I'm looking to upgrade Panorama (virtual) from 9.0.x to 9.1.x and then eventually to 10.x. Currently, the Panorama is running in legacy mode. When I upgraded to 9.0, I increased the system disk to 81GB, so no issues here. It seems leaving production panorama in legacy mode is not recommended. Per the documentation, it seems I have to add a ...

Unusually Large Pings Detected by Firewall Monitoring. Any Ideas?

Hi All, We are running Panorama 8.1 (Has been upgraded to 9.1.10 since the issue occurred). The Firewall itself is a 3260 running 9.1.4We have seen a few instances in the past 3 months where a session has been detected by the Firewall that shows a simple ping has been sent from our monitoring servers (We have two which are running completely dif...

Discussions

Welcome to the Panorama Discussions!

Adding zones in Panorama

Panorama shared-policy-md5sum