About scooby59

Hi I am managing several devices to 3 different Panorama appliances (3 physically separate networks) I have configured all of the Firewalls  (running 5.0.4 and 5.0.6)  with their Panorama settings and can see them in Panorama/Managed Devices.  The details such as software version and Apps and threat version are showing so I know they are talking to Panorama, when I click on Manage Backups, I can see a list of committed configs so I am confident that the devices are backing up but I have a couple of issues. 1.  When I click on 'load' next to a committed configuration in the list of backups, I dont understand where that loads to? (the message just says its loaded) Is it the configuration showing in the context in Panorama for that particular device (so when I go to that context will the candidate configuration be the one I loaded?) or is it loded onto the actual device so if I log on locally will that be the candidate config? 2.  I have two devices (running 5.0.4 and 5.0.6) which when I click 'load', I get an error message saying that the device with that serial number is an 'invalid device'.  I dont understand this as the device is registered in Panorama and is backing up to it so how can it be invalid?           The only difference I can see is that the devices in question do not use their management interfaces whereas all the devices that can load their backups do use their management interface.  These 2 devices which show as invalid do not have an IP address on the Managed Devices tab, even though they are showing other details such as software version etc (they are managed on their outside interface, not the dedicated management interface) A little frustrated as the primary reason to buy Panorama was to backup palo altos and now I'm not convinced I'd be able to recover one from a backup! regards Mat ... View more

Hi I have a HA pair of PA-5020 and a single PA-2020 connected to switchports on a Cisco Nexus 7000 I'm seeing receive errors on all the physical ports on my PA boxes but nothing on the Cisco device. Duplex is set at auto, speed set at auto for both ends. Any ideas what these errors could be?  I have applied bpdufilter on the Nexus interface and the error rate seems to have dropped slightly, is it that these interfaces are actually healthy and show 'unwanted' Cisco proprietary traffic as errors? Also, I've tried changing speed and duplex settings on both ends in various configurations which results in the PA saying it is up, but the Cisco end being notconnect, cutting the firewall off but not forcing a HA failover. Any advice appreciated Many thanks ... View more