Disabled rules on Panorama being pushed to firewall

Hi All, 

I had a very strange behavior recently on panorama. Disabled rules don't go to firewalls when a push is performed from Panorama, but I had a disabled rule on panorama which got pushed to firewalls. Please find below events in the order the

Will the panorama log collector collect logs if synchronization with firewalls is disabled?

I have a panorama server.

System Mode panorama

If I set up a log collector and connect firewalls to the panorama, without synchronizing shared policies and templates.
Will the panorama log collector collect logs if synchronization with firewalls is di

Panorama 10.1 Rest API - Is there a way to add Static Route directly?

I am trying to add static routes to the PaloAlto device using Panorama REST API, I see we don't have direct option to add the static routes, all that we have to do is to edit the Virtual Router(a bucket where Static route option resides). Unlike Rest

Security Profile/ URL Filter enable but web site bypass blocking

Hi

Platform: PA-440

SW Version: 10.1.8

I created policy and I enabled Actions/Profile settings/URL Filter with customized one, it locks adult content.

1st attempt

website like chaturbate.com doesn't lock, in Monitor/URL filter appear blocked but I ca

How to dissociated Local and Global rule

Hello, 

I want to know a way to dissociated global rule and local rule, in order to change local rule on a firewall to global rule on the panorama.

We think about tagging global rules and make an export of rules without this tag on the Panorama, bu

Panorama XML API Export Device State not generated, resulting error response"Device parameter needed' Instead

Hello everyone, we tried to create a script to export the device-state of all devices (Firewall, Panorama).

The API request is https://<device-ip>/api/?type=export&category=device-state.

When we tried the request on firewall it generate the .tgz file

ikev2 site to site VPN to sites with multiple public ip addresses(used for failover)

for a client, i created these many tunnel interfaces for each of their sites. Now, for all these sites, they have 2-3 public ip addresses(for failover purposes). So, will i have to create new tunnel interfaces or should I just create new Ike gateways

Settings from global-template stack not showing on local pan-template but are showing in the template-stack.

I have configured a global-template on Panorama and added some settings to it such as Netflow, SMTP, SNMP and what have you.  I have a template for the local pan called pan-template and a template-stack that contains both global and pan-template with

Unable to view Panorama Advisory to check for expired certificates remediation.

Currently we use PA-VM and while I have checked Device Management --> Certificates, I am unable to find the Panorama Certificate mentioned in the email alert. 

The Panorama certificate for managing NGFWs and Log Collectors will expire on April 7, 2

Local VMWorkStation Panorma not synching with Local PA-415 Firewall

Hello All,

I am running a #paloalto #PA415 at home on my network. Over the last week I installed Panorama onto a #WMWorkstation. The #PA415 has been in my house for 1 year now and the Panorama has been installed for about 1 week. As this is a home ne

Panorama Eval license issue

Hi there,

I've just built a Palo Alto lab in my EVE-NG server (Panorama with 4 PAs FW using KVM VM-100 images) and I've applied  Eval licenses on all them and all the licenses have been accepted and updated when I check the license status.

However,

Cancel/undo/revert/delete some Local-overrides that were generated directly in the firewall

Hello good evening, again here bothering and looking for your collaboration for some questions about Panorama.

I have the following doubt, I understand that Local Override is not the best practice and should be used only in particular cases.

I ha