Panorama Discussions | Palo Alto Networks

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Panorama Splunk Logs Forwarding

Hello all, when I try to forward logs from Panorama to Splunk I couldn't see the logs for the past 15 days. I wanna export these logs manually and add them to Splunk but even though I set the row limit on Panorama CSV to 1 million I still only see the logs for the past 4 hours. And when I try to export these logs on the CLI via SCP/FTP, I can't ...

How to Fully Back Up Panorama VM in Azure

We’re trying to implement a full backup solution for a Panorama VM hosted in Azure, including all sensitive elements like auth credentials, private keys, and user passwords. Here’s what we’ve found: The XML API config export works, but it sanitizes sensitive info. category=device-state is not supported on Panorama (it errors out saying a dev...

Unable to push tempalte to new firewall

I have setup a couple of new firewalls and I am unable to push the template from panorama. Also device group has not yet been pushed. Should I deploy template or device group first? See the errors below..

Resolved! PAN-OS 10.2.4-h2 sync issue

Recently upgraded to PAN-OS version 10.2.4-h2. Ever since the upgrade, any change from Panorama shows the shared policy or template as out of sync. It requires a full push to sync. I picked 10.2.4-h2 since it met all security vulnerabilities but has anyone else seen this issue? If so, is there a better version or HF to upgrade to? I'd like to re...

Panorama PUSH scope shows stale object - 10.2.5-h1

Hi Team We see an issue with Push Scope on Panorama running Pano-OS version 10.2.5-h1. We see 2 objects still under Push Scope when we have already completed the Push. These are two objects which are present no matter what changes you in do in Security Policy. We have tried to do a Full Push/partial push multiple times. Customers have also up...

URL Category Change

When submitting a request to re-categorize a URL at https://urlfiltering.paloaltonetworks.com, I consistently receive a "no change" response—even in cases where a reclassification seems justified. For example, the URL edusupport.minecraft.net is currently categorized as "Games," while the main site education.minecraft.net is appropriately cate...

Resolved! Panorama - HA - Last primary-suspended state reason: User requested

Hey Guys, I am trying to find out why would Panorama HA switch would happen. From the out of "show high-availability state" I see that the switch was requested by a user. However, I am trying to get the logs to understand which user actually requested it. I cannot see this information in Monitor > config nor on Monitor > system. Can so...

Resolved! Usergroup

We have firewall managed by Panorama and have used security group from Active Directory in the polices.Want to know where do we check ( panorama or the firewall) the list of groups seen by the firewall and list of users in a group. And also want to know the cmd for manual sync and do we need to run it on Panorama or Firewall.

Resolved! All committed entries with commit version < 3434 have been cleaned up from the replay database.

Getting the attached alert in Panorama. Does anyone have an idea about the reason behind it? If yes, please share any official justification for the same. The message says: "All committed entries with commit version < 3454 have been cleaned up from the replay database."

Nutanix Compatibility

Does anyone know when PaloAlto is going to release a version of Panorama 11 that is compatible with Nutanix?

Panorama doesnt have security policy logs in monitor tab after upgrading to 11.1.6-h3

Did a Panorama upgrade a to plan firewall upgrade to fix BUG ID PAN-242634. but looks like upgrading to 11.1.6-h3 would be hitting a logging issue. Is there anyone facing similar issues.I saw a posting in reddit, some one claiming they are having constant issues of logging on their firewalls since the upgrade to 11.1.6-h3 https://www.reddit.com/...

I want to download a panorama and convert to EVE-NG and install in the eve-ng environment, can someone to guide me to where to download it? Thanks

Panorama - SAML SSO with ADFS error

Hi, We have configured SAML SSO with Microsoft ADFS 2016. But after test, it gives error "Error Displaying SAML error response page". Panorama version is 11.1 Below steps are performed. 1. Panorama side: 1a >Imported ADFS meatada under server profile> SAML Identity Provider 1b> ...

PANORAMA does not show the configuration or system logs of the firewalls

Hello good afternoon, as always thanks for the support and collaboration: I recently added a couple of Raid to m-100, as these were not configured, I made the settings at log setting level to send only configuration and system logs of the firewalls. At the configuration level, everything is fine, from panorama to the firewalls, so that the log...

Panorama running 11.1.4-h7, issues modifying existing rules in templates

Panorama and all firewalls running 11.1.4-h7 (the preferred). Can't modify existing rules in templates as the account in use is radius authenticated. So PAN Support told me to create a local admin account, which I did, and that account can modify. Support states, this bug is slated to be fixed in release 11.1.8 that was scheduled to be released...

Discussions

Welcome to the Panorama Discussions!

Panorama Splunk Logs Forwarding

How to Fully Back Up Panorama VM in Azure

Unable to push tempalte to new firewall

Resolved! PAN-OS 10.2.4-h2 sync issue

Panorama PUSH scope shows stale object - 10.2.5-h1

URL Category Change

Resolved! Panorama - HA - Last primary-suspended state reason: User requested

Resolved! Usergroup

Resolved! All committed entries with commit version < 3434 have been cleaned up from the replay database.

Nutanix Compatibility

Panorama doesnt have security policy logs in monitor tab after upgrading to 11.1.6-h3

I want to download a panorama and convert to EVE-NG and install in the eve-ng environment, can someone to guide me to where to download it? Thanks

Panorama - SAML SSO with ADFS error

PANORAMA does not show the configuration or system logs of the firewalls

Panorama running 11.1.4-h7, issues modifying existing rules in templates

resolve hostname in logs now working in panorama

IoT Devices in Panorama

All committed entries with commit version < 3434 have been cleaned up from the replay database.

Panorama PDF summary report of 1 week/month

Does thePAN 11.1.13 on panorama will work on local FW that is using 10.1.13-hr?

Rename security zones on panorama and push it to the firewalls

Re: Can we create a custom log forwarding to syslog server for PAN OS greater then 11.0.0

Re: Rename security zones on panorama and push it to the firewalls

Re: Upgrade Panorama 11.1.0 to 11.2.x and PANOS

Re: Accidently clicked on Install in PAN-OS upgrade.

Unlock your full community experience!

Resolved! PAN-OS 10.2.4-h2 sync issue

Resolved! Panorama - HA - Last primary-suspended state reason: User requested

Resolved! Usergroup

Resolved! All committed entries with commit version < 3434 have been cleaned up from the replay database.