Technical Documentation when Panorama does a push to a NGFW

[RoutingWithJon]

Hi All,

I'm hoping to understand a bit more around how a Panorama device will push config to a NGFW. I've heard things such as Panorama doesn't actually send the config to the NGFW but the NGFW constantly polls the configured Panorama Server but I'm unable to find any technical documents around this to understand what sort of protocol/port it uses and what sort of behaviour happens under the hood.

Does anybody have any diagrams/white papers or understand around this process that they can share?

Thanks.

[OtakarKlier]

Hello,

With regards to the configuration, Panorama pushed the configs to the PAN's. With regards to logging, the PAN's send their logs to Panorama.

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/panorama-overview/panorama-commit-val...

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-large-scale-firewall-deployment...

Regards,