About Elwess

Hi, We have panorama in 9.1.9 version and  PA-220 in same version.   we imported configuration from pa to panorama, added just e pôlicy rule and pushed again the template and device group to same firewall.  but then we get always pushh failed with errors saying NAT rules and policy rules are already in use !   is that normal ? we have exactly the same rules on device group and on the firewall. , we tried to force value but still we get same eror :   Last Push State Details Details: . Validation Error: . service -> port-2083 'port-2083' is already in use . service -> port-2083 'port-2083' is already in use . service is invalid . rulebase -> security -> rules -> allow all 'allow all' is already in use . rulebase -> security -> rules -> allow all 'allow all' is already in use . rulebase -> security -> rules is invalid . rulebase -> security is invalid . rulebase -> nat -> rules -> MGMT-to-WAN 'MGMT-to-WAN' is already in use . rulebase -> nat -> rules -> LAN-to-WAN 'LAN-to-WAN' is already in use . rulebase -> nat -> rules -> MGMT-to-WAN 'MGMT-to-WAN' is already in use . rulebase -> nat -> rules -> LAN-to-WAN 'LAN-to-WAN' is already in use . rulebase -> nat -> rules is invalid . rulebase -> nat is invalid . rulebase is invalid   any help please ... View more

Hello ,   We have M-600 Panorama device and we need to get 2 seperate networks : MGT : for firewalls administration and to receiving logs ( this network is isolated from internet) Ethernet 1/2 : a new interface just to make panorama reach internet for updates.   the problem is that i can't specify route to internet through ethernet1/2 next hop.   any idea how yo configure that please ? ... View more