Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4841 Views
  • 0 replies
  • 0 Likes

Loading firewall context in CLI

Is there a way to load firewall context in Panorama CLI, similar to how we can load in GUI. Or is there a way to export in excel runtime stats/routes in GUI from virtual router.

raji_toor by L4 Transporter
  • 1468 Views
  • 4 replies
  • 0 Likes

Software updates PA-3220

Good day, I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulate them via the CLI, our appliances are not connected to internet. Every time I try to upload or i...

Resolved! Reason: TCP channel setup failed, reverting configuration issue.

Hello, Since recently we have a few firewalls that we are unable to push because the firewall is checking connectivity to panorama and this is failing. Inside panorama the device is listed as connected and from the firewall's session table I can see there is an existing session to panorama. 2023-06-07 16:38:38.410 +0200 ACR: Performing panora...

zGomez by L3 Networker
  • 27233 Views
  • 14 replies
  • 0 Likes

Resolved! Error pushing templates from PANORAMA to PA850 device

Hi All, I'm pushing the templates and variables from our panorama to our new device. The variables are correct and I keep getting an error that says Validation Error: . network -> ike -> gateway -> PA-PA-EUR-GW -> local-address -> ip 'x.x.x.x/30' is not a valid reference . network -> ike -> gateway -> PA-PA-EUR-GW -...

weezy by L3 Networker
  • 2525 Views
  • 7 replies
  • 0 Likes

Configure cluster send Log to Panorama that not manage it

Hello, I have a Panorama that manage several clusters and I have one remote cluster that isn't managed but I would like to have the cluster log on Panorama just to have only 1 point to analyze the logs. It's possible to configure a unmanaged cluster to send the log to Panorama?

Chris80 by L1 Bithead
  • 1897 Views
  • 5 replies
  • 0 Likes

Firefox slow/hanging when working in Panorama

I am running the latest version of Firefox (138.0.3) on 64-bit Windows 11 Enterprise. I have 2 plugins running, LastPass and uBlock. Panorama is painfully slow to do anything. Change screens/tabs, open a setting, change a drop down, etc. I also will occasionally get the "this page is slowing down Firefox" message. Panorama seems to work f...

jwill2 by L2 Linker
  • 1406 Views
  • 2 replies
  • 0 Likes

Panorama passive device redistributing User-ID mappings?

Dear community! We have configured user-ID redistribution to send mappings to firewalls from Panorama. The same config as the following: https://www.packetswitch.co.uk/palo-alto-user-id-redistribution/ We have to panoramas in active/passive and some firewalls are having alarms like the following: Issue description :: Redistribution Agent Pa...

Carracido by L4 Transporter
  • 963 Views
  • 1 replies
  • 0 Likes

Panorama Splunk Logs Forwarding

Hello all, when I try to forward logs from Panorama to Splunk I couldn't see the logs for the past 15 days. I wanna export these logs manually and add them to Splunk but even though I set the row limit on Panorama CSV to 1 million I still only see the logs for the past 4 hours. And when I try to export these logs on the CLI via SCP/FTP, I can't ...

How to Fully Back Up Panorama VM in Azure

We’re trying to implement a full backup solution for a Panorama VM hosted in Azure, including all sensitive elements like auth credentials, private keys, and user passwords. Here’s what we’ve found: The XML API config export works, but it sanitizes sensitive info. category=device-state is not supported on Panorama (it errors out saying a dev...

Resolved! PAN-OS 10.2.4-h2 sync issue

Recently upgraded to PAN-OS version 10.2.4-h2. Ever since the upgrade, any change from Panorama shows the shared policy or template as out of sync. It requires a full push to sync. I picked 10.2.4-h2 since it met all security vulnerabilities but has anyone else seen this issue? If so, is there a better version or HF to upgrade to? I'd like to re...

Panorama PUSH scope shows stale object - 10.2.5-h1

Hi Team We see an issue with Push Scope on Panorama running Pano-OS version 10.2.5-h1. We see 2 objects still under Push Scope when we have already completed the Push. These are two objects which are present no matter what changes you in do in Security Policy. We have tried to do a Full Push/partial push multiple times. Customers have also up...

UtkarshKumar_0-1697484374310.png

URL Category Change

When submitting a request to re-categorize a URL at https://urlfiltering.paloaltonetworks.com, I consistently receive a "no change" response—even in cases where a reclassification seems justified. For example, the URL edusupport.minecraft.net is currently categorized as "Games," while the main site education.minecraft.net is appropriately cate...

SSuggsMorales_0-1745525982049.png
SSuggsMorales_1-1745526018117.png
SSuggsMorales_2-1745526044622.png

Resolved! Panorama - HA - Last primary-suspended state reason: User requested

Hey Guys, I am trying to find out why would Panorama HA switch would happen. From the out of "show high-availability state" I see that the switch was requested by a user. However, I am trying to get the logs to understand which user actually requested it. I cannot see this information in Monitor > config nor on Monitor > system. Can so...

Resolved! Usergroup

We have firewall managed by Panorama and have used security group from Active Directory in the polices.Want to know where do we check ( panorama or the firewall) the list of groups seen by the firewall and list of users in a group. And also want to know the cmd for manual sync and do we need to run it on Panorama or Firewall.

  • 845 Posts
  • 47 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors