This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About bseal
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About bseal
03-24-2023
29Posts
2Likes
1Solution
Mar 24, 2023Last Visited
User
Activity
User
Profile
Latest posts by bseal
| Subject | Views | Posted |
|---|---|---|
| 3927 | 02-03-2020 08:28 AM | |
| 3971 | 02-03-2020 04:30 AM | |
| 1431 | 01-24-2020 05:52 AM | |
| 1174 | 09-17-2015 02:39 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 02-03-2020 08:28 AM | |
| 1 Like | 02-03-2020 04:30 AM |
User Badges
Community Statistics
| Member Since | 05-25-2015 07:58 AM |
| Date Last Visited | 03-24-2023 09:42 AM |
| Posts | 29 |
| Total Likes Received | 2 |
02-03-2020
08:28 AM
1 Kudo
The steps mentioned in the article provides step by step process, where an existing HA-pair configuration ( config-local to the firewall) is migrated to the Panorama Management. Steps are to be executed for each firewall in HA unit, so at any point of time there is always a firewall available to take care of the traffic flow. Make sure to clear Enable Sync between the units till migration is complete. Thanks
... View more
02-03-2020
04:30 AM
1 Kudo
There should not be any service interruption on migration of an existing HA pair into Panorama Management. Here is the link to the steps to complete the setup: https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management.html Refer to : Migrate a Firewall HA Pair to Panorama Management Thanks
... View more
01-24-2020
05:52 AM
If I understand correct, you are trying to reference user-groups from the Active Directory in the security rules on Panorama. Panorama does not have a user-id feature , however this can be done if one of the managed device is configured as Master device. The user, group information will be pulled from the Master device. Here is an article for the configuration: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clb6CAC
... View more
09-17-2015
02:39 PM
I am trying to push a shared policy to a device group using XML-API but it fails with the following error:
The Panorama is on PAN-OS-7.0.1. This issue does not exist when I am on PAN-OS-6.1.x
<response status="error" code="17">
-<msg>
-<line>
commit-all -> shared-policy -> device-group has unexpected text.
</line>
-<line>
commit-all -> shared-policy -> device-group is invalid
</line>
</msg>
</response>
The XML api browser command that I am using:
https://10.21.7.55/api/?type=commit&action=all&key=LUFRPT14MW5xOEo1R09KVlBZNnpnemh0VHRBOWl6TGM9bXcwM3JHUGVhRlNiY0dCR0srNERUQT09&cmd=<commit-all><shared-policy><device-group>Bhaswati</device-group></shared-policy></commit-all>
In PAN-OS 6.1.x the XMP api command changes to:
https://10.21.7.55/api/?type=commit&action=all&key=LUFRPT14MW5xOEo1R09KVlBZNnpnemh0VHRBOWl6TGM9bXcwM3JHUGVhRlNiY0dCR0srNERUQT09&cmd=<commit-all><shared-policy><device-group><name>Bhaswati</name></device-group></shared-policy></commit-all>-------------------------> When executing this command I am successful in passing onto the policy in the device group.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-24-2023
09:42 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks