- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
01-01-2024 09:35 PM
01-02-2024 03:59 PM
The firewall needs to be connected to panorama to receive the correct log collector configuration.
The log collector get's a list of firewalls that are allowed to send log to it from the managed devices, and managed devices are instructed which collector is their primary log forwarding target etc.
This cannot be achieved without attaching a firewall to panorama managed devices (you are not required to push any configuration onto the managed firewall, if that is your worry)
01-02-2024 11:06 PM
Thanks Reaper, due to some restriction in our environment we are not allowed to add few firewalls to Panorama as managed devices.
I know is not a normal practice and its an exceptional configuration we need to achieve the goal.
01-03-2024 02:40 AM
You can do it but you still need to add the firewall as a managed device but don't add it to any templates or device-groups. I've done this recently for the same purpose of getting the logs into Panorama without managing it.
01-03-2024 04:00 AM
Hi Vsurresh,
thank you for your response.
So to accomplish the requirement, I need to add the firewall under Panorama > Managed devices
But I should not add the firewall in any template or device groups
Correct !
01-03-2024 04:06 AM
I can't remember exactly what I did but these are the steps I took looking at my notes.
01-03-2024 03:07 PM
indeed, the firewall does not need to be member of a device group or template, but it does need to be in 'managed devices' to get the colector configuration sent to it
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!