This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4842 Views
  • 0 replies
  • 0 Likes

Resolved! Device deployment from Panorama

Panorama > Device Deployment > Dynamic Updates > Applications and Threats Not all of my devices are showing up? If I choose install for the "contents" they all show (current or older versions), but not if I choose install for "Apps". All versions of GP, AV and WF appear to be normal. Any idea on where to begin to troubleshoot?

Disable inherited policies in a Device Group

I'm guessing this would be a Feature Request, as it's something that's not available in Panorama 7.x, 8.x, or 9.x (haven't checked 10.x). Is there a way to disable Policies (whether Security, NAT, QoS, etc) that have been inherited via the Device Group hierarchy? Meaning, if I have 3 Devices Groups (GP, Parent, Child), and I put 10 Security ...

fjwcash by • L4 Transporter
  • 5640 Views
  • 3 replies
  • 0 Likes

Migrate Panorama from Azure to ESXi is failed

I am trying migration Panorama with following procedure but have not succeeded, yet. https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor.html Now I am in STEP10 and I tried commit to panorama and failed. Error mes...

Resolved! Panorama import a list of objects from csv

Hello, I have recently taken on a project. This involves me restricting access for a specific machine to a list of public IP address which I have a list of. Normally I would just bite the bullet and manually enter the objects by hand but this time its over 100 addresses and I think the better option is making an address group of these addresse...

Resolved! replacing virtual routes ip

Hi, I need to replace all instances of a given IP address ( "Next Hop" address in the virtual router) with a different IP address. How to do that trough Panorama? Thank you in advance

Adnan_SA by • L1 Bithead
  • 3402 Views
  • 2 replies
  • 0 Likes

Need to test policy on many policies

Hi. I need to test if an internal site is accessable from several different zones. the destination and port will always be the same, and any source IP in the zones would work as a test, is there a way to run a policy match in a bulk manner where I can input everything once and Pano just spits out the policy that each source hits?

Pan Configurator Failing to download Panorama Config

I have configured the latest version of the PAN-Configurator. I have created my API key from a superuser account. when I tried to issue a command to label some rules it fails php rules-edit.php in=api://192.168.0.10 ruletype=security location=NDH1-CHC-FW actions=tag-Add:REV4DELeltion 'filter=(rule is.disabled)'I get the following error:---------...

Kaliman by • L1 Bithead
  • 9921 Views
  • 8 replies
  • 0 Likes

access domain with saml sso using Azure AD

Hi expert, We have Pano auth with SAML SSO , which is with Azure AD. To deploy access domain feature, can see some doc for Radius auth, but none is for SAML. Looks there is access-domain attribute on Azure AD, but I have no access to verify. If anyone has same configure, please shed some light. Thanks in advance !

AllanGao by • L1 Bithead
  • 2233 Views
  • 0 replies
  • 0 Likes

How to move all template configuration in "Shared" location into Vsys1

Hi all, Some help on this would appreciated. Evaluating a client panorama that has a variety of templates on it, with much of the configuration in the templates being done in the "Shared" location, and much of it in "vsys1" location, including a number of certificates that have been imported to one or the other inconsistently over the years....

Panorama template zone logging profile and dependency loop

I have entered a dependency loop situation in Panorama that surprised me a little. We have installed a new firewall, and configured it to talk with Panorama. It shows up here and we are ready to push configs. Said firewall have a template stack associated, and it's placed in a device group to receive a base set of policies. Now the template-st...

Resolved! Bulk MTU Size Change via Panorama

Hi All, We have a number of tunnel interfaces managed by Panorama where we want to change the default MTU size. Just wondering if we can script this or does each interface need to be touched to make the change? Thank a Veteran today, Dan

Encryption algorithm used in Panorama for admin users

Hello Due to an internal IT risk audit, we need to know the encryption algorithm that Panorama uses to store the device administration accounts in your local database such as the master admin account or any other account that we may create to administer the device. Please, we need an official link from the manufacturer or an email from the man...

BigPalo by • L4 Transporter
  • 1862 Views
  • 0 replies
  • 0 Likes

Panorama integration

Do we foresee any downtime during taking existing running firewalls behind panorama server? Also what precautions we should consider for such work?

d.spider by • L2 Linker
  • 2627 Views
  • 2 replies
  • 0 Likes
  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks