About Kathiravan_R

Log-collector status show as active and connected. Checked the logging status and based on the time stamp, observed that log creating and log forwarding are stopped. So panorama is not showing a logs for pair of PA-850 firewalls.   We have tried restarting the management server on managed firewalls but it didn't helped.   Any suggestion and helps are highly appreciated. ... View more

Last week we made a changes(added new IP addresses as a Source) to the existing security policy and tried verifying by validating template/device group for target firewalls however it results in validation failed with following errors.     user-id-agent unexpected here Vsys is invalid Device is invalid Configuration is invalid   Any help and suggestions are highly appreciated. ... View more

ACC is not displaying any data, it shows as "in progress". Recently Panorama and managed firewalls are upgraded to 8.1.23 post upgrade we ran into this issue. Tried restarting the management server but it didn't helped. Shall I try restarting the dataplane? Looking for the experts advise. Any suggestion and helps are highly appreciated. ... View more

Recently we created a new template with different server profiles and log settings in Panorama and tried validating in the target firewalls but it throws the validation error. Looking for the experts advise to address this issue.   Panorama is on PAN OS version 9.1.10 Affected Firewalls are running on PAN OS version 8.1.13   Validation Error:     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-traffic -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-traffic -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-info -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-info -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-info -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-info -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-info -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-info -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-low -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-low -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-low -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-low -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-low -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-low -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-med -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-med -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-med -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-med -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-med -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-data-med -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-hi -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-hi -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-hi -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-url-hi -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-cr -> send-syslog 'Live_Log_Collectors' is not a valid reference     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list -> Live_Log_Forwa-threat-cr -> send-syslog is invalid     . vsys -> vsys1 -> log-settings -> profiles -> Live_Log_Forwarding -> match-list is invalid     . vsys -> vsys1 -> log-settings -> profiles is invalid     . vsys -> vsys1 -> log-settings is invalid     . vsys is invalid     . devices is invalid     . shared -> log-settings is invalid     . shared is invalid     . Configuration is invalid ... View more

We have PA 5250 which has configured with multiple EDL. Suddenly all the EDLs are failing that throws the "Unable to fetch external dynamic list. Couldn't resolve host name. Using old copy for refresh." As a workaround we rebooted the firewall and it resolved the issue. Looking for the experts advise to resolve this issue permanently. ... View more

When we try to manually Sync the Active/Passive. HA Pair has local config sync error. This error is trying to sync the config between the two devices, but it's trying to sync local config (ie. management config) and not policies. I don't believe it should be trying to sync things like management ip's, hostname etc..   I need the expert's advise on this issue. Any helps are highly appreciated. ... View more

Configured the Panorama SAML authentication for Admin UI SSO integration with Okta. I followed the Okta/Palo Alto single sign on setup instruction. Here SP(Palo Alto) will initiate the SSO and Okta will acts as an IDP. https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-Admin-UI.html?baseAdminUrl=https://gpmedicare-admin.okta.com&app=paloaltonetworkssaml&instanceId=0oa6vv41m6K0mPAyc1t7   Issue: I am able to login to Panorama after the successful SSO but frequently getting the "Empty SSO Relaystate". Is there anything I have to tune from the Panorama? Please advise. ... View more