Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Resolved! Network Interface not pushed from Panorama

Hello, We need to add an extra IP Range to route out one of the existing sub interfaces on the Palo Alto firewall.The change has been committed and pushed in Panorama but is not showing on the firewall.Both using version 8.1.3 Firewall network interface: Panorama network interface with the change circle in red: How do we push this change to th...

Resolved! Panorama: why can't we edit Application settings in Device Groups?

Specifically, why can't we disable the SIP ALG in Panorama, in order to push that out to the firewalls? Even more specifically, why isn't that option available in the Panorama GUI? It's a real pain having to manually change that on each individual firewall, and commit the change locally, instead of setting it once in a Device Group and having i...

PAN-OS command for view a rule

Hello, I am looking for a command in PAN-OS for view one rule created by GUI but I can't find it. I want to view a rule configured searching it by rule name or by rule number. Best the first option. Anybody can help me? Thanks in advance

Update Remote Firewalls from Panorama Fails

Got a bunch of firewalls, and anytime I try to do an install of software from Panorama, I get errors along the lines of "Failed to download PanOS_xxxx-n.n.n. Download error: Couldn't connect to server"If I go to the firewall appliances themselves, I can download and install without an issue. The firewalls have no NAT or anything between them a...

Resolved! Panorama ingestion from syslog

Is it possible to configure Panorama to ingest syslog messages from a non-Cortex source? I would like to send my VPN logs to Panorama but am not seeing anything but Traps as an option when configuring the ingestion profile.

How Panorama can help scale firewall management with ease

Through 2023, 99% of firewall breaches will be caused by firewall misconfigurations, not firewall flaws. Since firewalls are in different form factors in various locations, network security management is difficult. Configuration management is always an important task, in today's complex deployment scenarios. Other essential requirements of a man...

Panorama and Firewall in Different Timezones

Hi Guys,This seems to be a weird question but I am thinking about it for a while.Let us say the Panorama is in US with US time zone configured and the firewall is in UK with UK time zone. My question is what will be the timing shown in the logs in Panorama when the firewall sends the logs to Panorama? Will it be US or UK timing?Thanks

Panorama import address group

Howdy,I couldn't the Panorama discussions so I apologize.I am being asked to import the US sites from this link,https://docs.microsoft.com/en-us/power-automate/limits-and-config I didn't find an import topic for address groups.Surely there a way to import a lot of non segment ips into Panorama into a new address group?CSV sheet maybe?Thank youPa...

Quiesce snapshots on Panorama VM´s log disks

Dear Community, Well known is the issue when backing up Panorama VMs using quiesce snapshots.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UncCAE&lang=en_US%E2%80%A9 A question is:- Can still be used quiesce snapshots to backup the log disks or the incompatibility affects to both system and log disks? Thank you!

Resolved! Can't commit from Panorama

I have two Palo 3200 in HA mode and if I try to commit the configuration change I become following error:Validation Error:deviceconfig -> system -> panorama-server unexpected heredeviceconfig -> system is invalidCommit failedOne of the both firewall is successful but the second one, don't take the configuration and stay Out of sync. Wha...

Resolved! Locked out of Panorama webpage

I was setting some changes on Panorama and accidentally committed when I had a certificate profile attached to the authentication setting in Panorama (Panorama>Setup>Management>Authentication Settings). It now returns a 400 server error when trying to webpage to Panorama. I still have superuser access to the cli, can I remove that cert ...

show system resources | match mgmtsrvr output

I am having issues with panorama processing log. Upon investigation, I see this: (primary-active)> show system resources | match mgmt16396 20 0 2944028 1.266g 8496 S 0.0 2.0 4573:26 mgmtsrvr Does it mean that the mgmtsrvr is consuming a lot of memory? Thoughts?

Panorama commit failed - Configuration is invalid

hi guys,wondering if anybody has experienced this issue before. I imported the firewall config to Panorama and now trying to push it to the firewall. The issue is that when I try to push the template config, it gets failed with Configuration is invalid. It does not give more details to troubleshoot. Thanks,

Resolved! Unable to Delete Delete all from HA Settings in Panorama.

Hi team, I am unable to delete all HA Settings in the Panorama template in the getting error. screenshot attached.

Adding zones in Panorama

Hello everyone, I have question. I inherited a few firewalls that are partially managed by Panorama, meaning I have objects and other items pushed to the firewall from Panorama but mostly everything else is local. On the local firewall, contains all firewall rules, zones, interfaces are configured with ip addresses. The other firewalls are fu...

Discussions

Welcome to the Panorama Discussions!

Resolved! Network Interface not pushed from Panorama

Resolved! Panorama: why can't we edit Application settings in Device Groups?

PAN-OS command for view a rule