Panorama and Firewall Communication

Dear All, 

I have Panorama hosted in one of the location [where geo graphically separated] abd my Managed firewall are located across the globe. Due to Embargoed few countries I don't have  option to establish S2S VPN or any other over lay. So I ha

Pushing template from Panorama resulting in error

Imported Palo Alto configuration to Panorama

Modified BGP configuration..to be precise added "deny" rules under bgp>import>

committed changes to Panorama

Pushed the modified templates to the same device from where I imported the config.

Commit is failin

Panorama vCenter Plugin - What happens if VMWare vCenter is down?

Hello all,

we are using Panorama with VMWare vCenter Plugin v2.1, connected to several vCenters to pull IP information about several VMs to be then used in polices on the firewalls.

Now the question came up, what will happen if a vCenter isn't reac

Disabled rules on Panorama being pushed to firewall

Hi All, 

I had a very strange behavior recently on panorama. Disabled rules don't go to firewalls when a push is performed from Panorama, but I had a disabled rule on panorama which got pushed to firewalls. Please find below events in the order the

Will the panorama log collector collect logs if synchronization with firewalls is disabled?

I have a panorama server.

System Mode panorama

If I set up a log collector and connect firewalls to the panorama, without synchronizing shared policies and templates.
Will the panorama log collector collect logs if synchronization with firewalls is di

Panorama 10.1 Rest API - Is there a way to add Static Route directly?

I am trying to add static routes to the PaloAlto device using Panorama REST API, I see we don't have direct option to add the static routes, all that we have to do is to edit the Virtual Router(a bucket where Static route option resides). Unlike Rest

Security Profile/ URL Filter enable but web site bypass blocking

Hi

Platform: PA-440

SW Version: 10.1.8

I created policy and I enabled Actions/Profile settings/URL Filter with customized one, it locks adult content.

1st attempt

website like chaturbate.com doesn't lock, in Monitor/URL filter appear blocked but I ca

How to dissociated Local and Global rule

Hello, 

I want to know a way to dissociated global rule and local rule, in order to change local rule on a firewall to global rule on the panorama.

We think about tagging global rules and make an export of rules without this tag on the Panorama, bu

Panorama XML API Export Device State not generated, resulting error response"Device parameter needed' Instead

Hello everyone, we tried to create a script to export the device-state of all devices (Firewall, Panorama).

The API request is https://<device-ip>/api/?type=export&category=device-state.

When we tried the request on firewall it generate the .tgz file

ikev2 site to site VPN to sites with multiple public ip addresses(used for failover)

for a client, i created these many tunnel interfaces for each of their sites. Now, for all these sites, they have 2-3 public ip addresses(for failover purposes). So, will i have to create new tunnel interfaces or should I just create new Ike gateways

Settings from global-template stack not showing on local pan-template but are showing in the template-stack.

I have configured a global-template on Panorama and added some settings to it such as Netflow, SMTP, SNMP and what have you.  I have a template for the local pan called pan-template and a template-stack that contains both global and pan-template with

Unable to view Panorama Advisory to check for expired certificates remediation.

Currently we use PA-VM and while I have checked Device Management --> Certificates, I am unable to find the Panorama Certificate mentioned in the email alert. 

The Panorama certificate for managing NGFWs and Log Collectors will expire on April 7, 2