Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4844 Views
  • 0 replies
  • 0 Likes

Management ssl certificate in HA Panorama

Hi All, We have two Panorama devices running in HA (active/Passive) mode with PAN-OS 10.0.5. And there is a Certification authority and self sign certificate generated under certificates for panorama management access in the active device. referencing this self signed certificate SSL/TLS service profile has been created and the same is calle...

GN_MOTC by L0 Member
  • 2617 Views
  • 0 replies
  • 0 Likes

Resolved! not able to disable packet-capture for DNS security from panorama 10 to firewall 9.1

Panorama is running on 10.0.5 and Firewalls running on 9.1.7We want to disable packet-capture for DNS security license from Panorama , but there is no option in Panorama for DNS security as multiple categories replaced this option in 10.0 Panorama 10.0.5 Firewall 9.1.7 can we disable pcap for all new categories showing in DNS-Security in Panor...

Deepak25_0-1625631897133.png
Deepak25_0-1625632270687.png
Deepak25 by L3 Networker
  • 3502 Views
  • 2 replies
  • 0 Likes

granular filtering for panorama/logging service in log forwarding profile

Currently we are managing all firewall from Panorama and configured log forwarding profile to forward logs to panorama/logging service. To enable log forwarding to logging service we have also enabled option to forward logs in cortex data lake in all firewall (device > setup>management > enabled duplicate logging ). On cortex data lake ...

Deepak25 by L3 Networker
  • 2370 Views
  • 0 replies
  • 0 Likes

want to onboard panorama managed firewall on another cortex data lake instance

We have two cortex data lake instance of 1 TB and 5 Tb , 5 TB we are already using to send the logs from all firewalls which are panorama managed. So for 1 TB logging instance panorama is not bind. For 5 TB logging instance panorama is bind. As this 1 TB is not utilized and our logs are started to purge from 5 TB logging service instance , we wa...

Deepak25 by L3 Networker
  • 3068 Views
  • 0 replies
  • 0 Likes

Problem with panorama

Hi,The problem is that every so often when we try to compile the VMware panorama it restarts and we lose the changes.what could you do to solve the problem? Version panorama: 9.0.9Version of palo alto: 9.0.9-h1 Kind regards

BigPalo by L4 Transporter
  • 5254 Views
  • 8 replies
  • 0 Likes

Palo Alto Networks Firewall not Forwarding Logs to Panorama (VM and M-100)

Hi PA Experts! Another issue I stumped upon yesterday 😞We replaced one of our PA firewall 5050 to PA 5220 couple of days ago, and when I am trying to find thetraffic logs corresponding to that PA 5220 device on Panorama, it shows nothing.I duoble checked the configuration on Panorama and the device PA to see everything is setup correctly for fo...

Fatema by L2 Linker
  • 10688 Views
  • 10 replies
  • 0 Likes

Adding Passive Panorama

Hi, We are trying to add Passive Panorama to our existing Panorama. When I try to sync the settings. they sync but fail half way with the following errors HA-Sync job failed . Completion time=2021/06/29 17:22:56. JobId=62.

Moving Panorma to a different hypervisor

We following article https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor.html to migrate from Azure to ESX, and on commit of the restored configuration snapshot (STEP 10 of the article) we are receiving the error “In...

0.png

FIPS Enabled Panorama - Change Management IP

Hello, Is there a best practice, for changing the management IP on a FIPS enabled Panorama M-100?I have a FIPs enabled Panorama M-100. It is configured with a management interface for administrative functions on one network. It is configured with another interface on a different network to communicate with managed firewalls (Layer 2 Adjacent). I...

Roger_K by L0 Member
  • 2973 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple Portals Same Template Panorama Multiple Vsys

I'm trying to see if there is a good way to use templates to create 2 different global protect portals using panorama. This would be used as a failover scenario, and ease changes, allowing us to use 1 template to configure both firewalls. Name and fqdn would be the same, just failover to the other IP. Problem is that I can't seem to find...

Sec101 by L4 Transporter
  • 8641 Views
  • 9 replies
  • 0 Likes

Disconnected from Panorama Server

Hello,We are getting a lot of alerts that saysDisconnected from Panorama Server:x.x.x.x., source: x.x.x.xI checked the interface statistics on both the Panorama server and the firewall and I didn't see any issue. Does anyone know what else could be causing this?Thanks,

x by L1 Bithead
  • 4911 Views
  • 4 replies
  • 0 Likes

Resolved! Panorama SYSLOG Forwarding

Hi All, I'm trying to forward Firewall Traffic & Threat logs (sent to Panorama by managed Firewalls using a Log Forwarding Profile set on Security Policy Rules) using a SYSLOG Server Profile configured under 'Panorama -> Server Profiles -> SYSLOG'. My thinking is that sending all logs through Panorama will be easier to manage however I...

Josh990 by L2 Linker
  • 5295 Views
  • 2 replies
  • 0 Likes

Change all IP address for firewall HA pair managed in Panorama

I have a HA firewall pair managed by Panorama. I would like to change all of the IP addresses of the interfaces. It's a lot to try to do through the GUI. My thinking is export the template as XML, make the necessary changes, and then import again. The firewall HA pair is a test harness. The existing configuration is from my production firewalls....

khsieh by L2 Linker
  • 6090 Views
  • 3 replies
  • 0 Likes
  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors