Panorama Discussions

Panorama Certificate Import Api Does not work when targeting a Vsys

See attached document.  When using the API in Panorama and trying to target a vsys, it always imports to the shared location.  The documentation says it supports this.  Here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api/pan-os-

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors.
We are currently using Panorama in VM mode.

1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hyperviso

Syslog Sending From panorama

HI

I have a question.
If panorama sends syslog to the syslog server, is it only the panorama syslog that is sent or all the logs of the local palo devices managed by panorama?

Thanks & Regards.

Panorama

New firewall refreshment to a new model and introduce to Panorama

We have Panorama which manage several firewalls. One of it is PA-3020 and we would like to do a refreshment with PA-440. 
In the current Panorama, there is already device group and template reference to the PA-3020. 
My question, what is the best way t

API/CLI - how to access subset of devices by tag assigned to them?

Hi there, 
I'm going to use device's tags to have another dimension beside of template/device groups. 
I've assigned a tag to subset of devices (using Panorama>Managed devices WebUI), but I'm really lost how I can get access/filter devices by this tag

Removal of Targets from Policy

I have a number of firewalls managed in Panorama that are to be decommissioned.

Some of these firewalls are in Device Groups with several thousand policy entries.  Annoyingly they have been assigned the firewalls in the target column.

Does anyone

Cloud NGFW I Cloud NGFW Integration with Panorama

We have deployed a cloud NGFW in azure using azure portal rule stack. The device is in production.

Now the requirement is to integrate this with panorama.

When we go to the device in Azure portal under security policy the options are greyed out. 

I

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

URGENT VPN failover help needed

Hello Everyone,

We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki.

The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are con

admin role panorama unable to push

Hi guys,

i need help for a stupid things but I cannot solve it.

My scenario: Panorama in 11.0.4-h1 with 40 firewall connected, one for every branch of my company.

What I want: the colleagues of the branch of Miami can made changes only template and d

Log Collector is error after upgrade OS version from 11.0.4-h2 to 11.1.x

I have an issue with Log collector ( local on Panorama server) after I upgrade OS version from 11.0.4-h2 to 11.1.2-h3 (and 11.1.2-h4) . The es on Log collector show status as “not running”.

- On active Panorama server:

+ See the Log collector ( local

Service Port overwrites Application default provided port (?)

Hello,

I would like to get a better understanding about the relationship Service vs Application when setting up FW rules:

Example:

"mysql" is provided with service TCP port 3306. 

If a rule is created using service TCP Port 58740 and in same rule und

CSR with more than 4 SANs

Hello,

We are operating a GlobalProtect environment that uses a generic Server SSL cert with a shared common name and the certificate lists multiple subject alternate FQDN names.

We are about to expand the GP Gateway numbers and need to add the S