This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 5135 Views
  • 0 replies
  • 0 Likes

Adding Passive Panorama

Hi, We are trying to add Passive Panorama to our existing Panorama. When I try to sync the settings. they sync but fail half way with the following errors HA-Sync job failed . Completion time=2021/06/29 17:22:56. JobId=62.

Moving Panorma to a different hypervisor

We following article https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor.html to migrate from Azure to ESX, and on commit of the restored configuration snapshot (STEP 10 of the article) we are receiving the error “In...

0.png

FIPS Enabled Panorama - Change Management IP

Hello, Is there a best practice, for changing the management IP on a FIPS enabled Panorama M-100?I have a FIPs enabled Panorama M-100. It is configured with a management interface for administrative functions on one network. It is configured with another interface on a different network to communicate with managed firewalls (Layer 2 Adjacent). I...

Roger_K by • L0 Member
  • 3200 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple Portals Same Template Panorama Multiple Vsys

I'm trying to see if there is a good way to use templates to create 2 different global protect portals using panorama. This would be used as a failover scenario, and ease changes, allowing us to use 1 template to configure both firewalls. Name and fqdn would be the same, just failover to the other IP. Problem is that I can't seem to find...

Sec101 by • L4 Transporter
  • 9554 Views
  • 9 replies
  • 0 Likes

Disconnected from Panorama Server

Hello,We are getting a lot of alerts that saysDisconnected from Panorama Server:x.x.x.x., source: x.x.x.xI checked the interface statistics on both the Panorama server and the firewall and I didn't see any issue. Does anyone know what else could be causing this?Thanks,

x by • L1 Bithead
  • 5174 Views
  • 4 replies
  • 0 Likes

Resolved! Panorama SYSLOG Forwarding

Hi All, I'm trying to forward Firewall Traffic & Threat logs (sent to Panorama by managed Firewalls using a Log Forwarding Profile set on Security Policy Rules) using a SYSLOG Server Profile configured under 'Panorama -> Server Profiles -> SYSLOG'. My thinking is that sending all logs through Panorama will be easier to manage however I...

Josh990 by • L2 Linker
  • 5655 Views
  • 2 replies
  • 0 Likes

Change all IP address for firewall HA pair managed in Panorama

I have a HA firewall pair managed by Panorama. I would like to change all of the IP addresses of the interfaces. It's a lot to try to do through the GUI. My thinking is export the template as XML, make the necessary changes, and then import again. The firewall HA pair is a test harness. The existing configuration is from my production firewalls....

khsieh by • L2 Linker
  • 6622 Views
  • 3 replies
  • 0 Likes

Resolved! SDWAN PAN-OS and Panorama - Docs are rough

I am working through the panorama/sdwan plugin docs for a new deployment using Nextgen firewalls' built in SDWAN, all on 10.0.6 and the plugin version is 2.1In the docs there seems to be some conflicting advice. See below. Anyone know which is correct here? I have to ship these devices off, and obviously having this setting wrong will cause some...

dpayne_0-1623254186161.png
dpayne by • L1 Bithead
  • 3764 Views
  • 2 replies
  • 0 Likes

Resolved! eventid: mem-limit-exceeded in Panorama

We have received below email alert from Panorama , what is the meaning of this high severity system logs ?actionflags: 0x0type: SYSTEMsubtype: resctrlconfig_ver: 0time_generated: 2021/06/04 08:41:01high_res_timestamp: 2021-06-04T08:41:01.000+05:30dg_hier_level_1: 0dg_hier_level_2: 0dg_hier_level_3: 0dg_hier_level_4: 0vsys_name:device_name: Panor...

Deepak25 by • L3 Networker
  • 4103 Views
  • 1 replies
  • 0 Likes

master device in panorama device-group if using dataplane interface

Due to high cpu utilization in firewall , we want to use dataplane interface of firewall for user-id services.Currently , when primary firewall failover to secondary we do not require to change master device in panorama device-group.How panorama collecting user-id info if primary firewall which selected as a master in device-group becomes passiv...

Deepak_K_0-1622112578545.png
Deepak_K by • L3 Networker
  • 4243 Views
  • 3 replies
  • 0 Likes

Resolved! Do we need to separately upgrade a local log collector during a Panorama upgrade?

Hi All, We are going to perform a Panorama upgrade from 8.1.15 to 9.1.9. The upgrade path is 8.1.15 --> 8.1.19 --> 9.0 (Download Only) --> 9.0.13 --> 9.1 ( Download Only ) --> 9.1.9 ( Preferred version ). In this environment, there is a local log collector configured in the same Panorama ( Collector serial number is the same as th...

Udana by • L1 Bithead
  • 4097 Views
  • 3 replies
  • 0 Likes

Panorama mgmt CPU usage

We are managing 4 location HA pair from Panorama and collecting logs using management interface of M200. (all devices and panorama in same data centre)Sometimes we observed delay in logs and commit operation , but mgmt cpu of M200 is less than 50% at that time.mgmt cpu utilization in panorama is showing utilization of only mgmt interface or over...

Deepak_K by • L3 Networker
  • 4486 Views
  • 1 replies
  • 0 Likes

Pamorama Management Only Mode not show log on GUI

We have issue about Panorama Management Only Mode not show logs.We have M-200 run on Collector mode and Panorama-VM run on Management Only.This's new setup and the firewall can forward log to collector but Panorama Management Only mode not show log on GUI. We tried to restart and reboot the panorama. > debug software restart log-receiver , &g...

Jitaphon by • L2 Linker
  • 3270 Views
  • 2 replies
  • 0 Likes
  • 733 Posts
  • 47 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks