Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Panorama import address group

Howdy,I couldn't the Panorama discussions so I apologize.I am being asked to import the US sites from this link,https://docs.microsoft.com/en-us/power-automate/limits-and-config I didn't find an import topic for address groups.Surely there a way to import a lot of non segment ips into Panorama into a new address group?CSV sheet maybe?Thank youPa...

Quiesce snapshots on Panorama VM´s log disks

Dear Community, Well known is the issue when backing up Panorama VMs using quiesce snapshots.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UncCAE&lang=en_US%E2%80%A9 A question is:- Can still be used quiesce snapshots to backup the log disks or the incompatibility affects to both system and log disks? Thank you!

Resolved! Can't commit from Panorama

I have two Palo 3200 in HA mode and if I try to commit the configuration change I become following error:Validation Error:deviceconfig -> system -> panorama-server unexpected heredeviceconfig -> system is invalidCommit failedOne of the both firewall is successful but the second one, don't take the configuration and stay Out of sync. Wha...

Resolved! Locked out of Panorama webpage

I was setting some changes on Panorama and accidentally committed when I had a certificate profile attached to the authentication setting in Panorama (Panorama>Setup>Management>Authentication Settings). It now returns a 400 server error when trying to webpage to Panorama. I still have superuser access to the cli, can I remove that cert ...

show system resources | match mgmtsrvr output

I am having issues with panorama processing log. Upon investigation, I see this: (primary-active)> show system resources | match mgmt16396 20 0 2944028 1.266g 8496 S 0.0 2.0 4573:26 mgmtsrvr Does it mean that the mgmtsrvr is consuming a lot of memory? Thoughts?

Panorama commit failed - Configuration is invalid

hi guys,wondering if anybody has experienced this issue before. I imported the firewall config to Panorama and now trying to push it to the firewall. The issue is that when I try to push the template config, it gets failed with Configuration is invalid. It does not give more details to troubleshoot. Thanks,

Resolved! Unable to Delete Delete all from HA Settings in Panorama.

Hi team, I am unable to delete all HA Settings in the Panorama template in the getting error. screenshot attached.

Adding zones in Panorama

Hello everyone, I have question. I inherited a few firewalls that are partially managed by Panorama, meaning I have objects and other items pushed to the firewall from Panorama but mostly everything else is local. On the local firewall, contains all firewall rules, zones, interfaces are configured with ip addresses. The other firewalls are fu...

Problems overriding a Panorama template via the XML API

I'm trying to disable via the XML API a IPSEC tunnel on a firewall which was configured using Panorama. I can manage to disable a locally created tunnel with the following GET request: https://CENSORED/api/?key=CENSORED&type=config&action=edit&xpath=/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name...

Panorama shared-policy-md5sum

Do you know what data is behind "shared-policy-md5sum" field for Panorama connected devices?It can be seen in the Panorama CLI output form the command "> show devices connected" and in the equivalent operational API call. I am working on an automation for collecting firewall data in Panorama and I need a way to match a firewall serial/vsys ...

Resolved! Error when upgrading Panorama to 10.0.7

Hi All, I have a client trying to update Panorama VM in ESXi from PAN OS 9.1.10 to 10.0.7 and they are receiving the below error:Looking at the show system disk-space command they do not have 80 GB collectively available, but their system disk is 280 GB. Also, looking at the tech support file I do see their is a section of memory in red called w...

Resolved! Restore Panorama

Hi, I'm trying to understand the process for restoring a Panorama (virtual appliance). For example, say for whatever reason the Panorama appliance won't boot. - How to backup the entire configuration for the restore ? Is this the option from Panorama > Setup > Operation > Export named Panorama configuration snapshot?- If the above is...

Panorama VM Registration

Hi Everyone, I have deployed a panorama vm, but I am unable to register it. I am getting the below error :CSSP Device Registration Error

Panorama and Firewall frequent disconnection

Hi Team, I'm facing issue where firewall and Panorama keeping disconnected every minute. It is getting connected and disconnecting. This happens within a minute, I have checked the reachability is fine between panoraman and firewall and port is open. I'm seeing in system logs TLS session disconnected not sure but again it is connecting. PAN OS 8...

Resolved! Fastest way to commit Panorama changes

Hey All, I have a customer who has about 50 PA FW's and Panorama. They will be using Cyberark to rotate passwords on service accounts, the account that the FW's are using for LAPD will be changing. Cyberark will make and replicate its change very fast but the FW commits will take way longer and USER ID will break as soon as the change is made. I...

Discussions

Welcome to the Panorama Discussions!

Panorama import address group