Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Problems overriding a Panorama template via the XML API

I'm trying to disable via the XML API a IPSEC tunnel on a firewall which was configured using Panorama. I can manage to disable a locally created tunnel with the following GET request: https://CENSORED/api/?key=CENSORED&type=config&action=edit&xpath=/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name...

Panorama shared-policy-md5sum

Do you know what data is behind "shared-policy-md5sum" field for Panorama connected devices?It can be seen in the Panorama CLI output form the command "> show devices connected" and in the equivalent operational API call. I am working on an automation for collecting firewall data in Panorama and I need a way to match a firewall serial/vsys ...

Resolved! Error when upgrading Panorama to 10.0.7

Hi All, I have a client trying to update Panorama VM in ESXi from PAN OS 9.1.10 to 10.0.7 and they are receiving the below error:Looking at the show system disk-space command they do not have 80 GB collectively available, but their system disk is 280 GB. Also, looking at the tech support file I do see their is a section of memory in red called w...

Resolved! Restore Panorama

Hi, I'm trying to understand the process for restoring a Panorama (virtual appliance). For example, say for whatever reason the Panorama appliance won't boot. - How to backup the entire configuration for the restore ? Is this the option from Panorama > Setup > Operation > Export named Panorama configuration snapshot?- If the above is...

Panorama VM Registration

Hi Everyone, I have deployed a panorama vm, but I am unable to register it. I am getting the below error :CSSP Device Registration Error

Panorama and Firewall frequent disconnection

Hi Team, I'm facing issue where firewall and Panorama keeping disconnected every minute. It is getting connected and disconnecting. This happens within a minute, I have checked the reachability is fine between panoraman and firewall and port is open. I'm seeing in system logs TLS session disconnected not sure but again it is connecting. PAN OS 8...

Resolved! Fastest way to commit Panorama changes

Hey All, I have a customer who has about 50 PA FW's and Panorama. They will be using Cyberark to rotate passwords on service accounts, the account that the FW's are using for LAPD will be changing. Cyberark will make and replicate its change very fast but the FW commits will take way longer and USER ID will break as soon as the change is made. I...

Resolved! Panorama Azure VM monitoring

Has anyone implemented this successfully. Below screenshots from Azure config Service PrincipalSecretAPI permissionUnder Enterprise Apps it shows my username, but it should not need a user ??? Reader role at subscription Panorama ConfigErrorno log file

Panorama upgrade fail with: error: rpmdb: BDB0178 Encrypted database: no encryption flag specified

I am working to upgrade my Panorama from 8.1.14 to 10.0.6. I have to do stepped upgrades and my first upgrade is from 8.1.14 to 8.1.19. When I click the install button for the upgrade to 8.1.19. I get the following error immediately. error: rpmdb: BDB0178 Encrypted database: no encryption flag specified I have opened a TAC case but thought I wou...

Resolved! Panorama compatibility

Hi Panorama could manage firewalls with versions far from the actual? Means if I have a Panorama running version 10.0.x, can I manage my firewalls running 8.0.x, 8.1.x, 9.0.x? or how many previous version could manage?

The device deployment license of panorama does not normally display the license information of the two devices

The customer has six devices, all of which have activated license. The customer wants to update the feature library through panorama, but finds that two of them do not see the license information on panorama. What do you suggest and how to troubleshoot?

Resolved! what is the best way to import backup into secondary RMA panorama M200

We RMA secondary Panorama M200 , currently we don't have backup of Secondary panorama. But Primary M200 is accessible.Which backup will be better option to export from Primary Panorama and import into Secondary Panorama ? 1. Export named Panorama configuration snapshot without selecting device groups and templates. size : 8191 kb or2. Export nam...

Panorama M200 config logs purged after adding RMA'd collecotr in Collector group

There are two options in Panorama to set quota for config logs.Earlier config log was showing for last 4 months in Panorama web gui. Today after adding RMA'd collector in existing collector group , only last 5 days of config logs showing in Panorama (which is as per 1st screenshot). Does 1st setting became effective after making changes in colle...

Palo Alto API application description?

Is there a way to access the application description through Palo Alto's api? Specifically panoramas?

Panorama upgrade local auth not working

Recently upgrade panorama to 8.0.17 and after it upgraded it got hung, so we had to reboot it to get it back. Once it was back it is no longer allowing local auth. Remote auth works via the GUI (thankfully). Neither local or remote auth works via cli (console doesn't work either). SSH using LDAP I get this message: Received disconnect from 10...

Discussions

Welcome to the Panorama Discussions!

Problems overriding a Panorama template via the XML API

Panorama shared-policy-md5sum