About Verac22

Hello again all,     My next hurdle is figuring out why my VM-Series firewalls aren't getting their logs to the panorama server.   I've checked the following soo far: Network path between the firewalls and panorama look good. it's allowing ICMP and all TCP. Managed collectors (local to this panorama an an HA panorama) show green, in sync, green health status. There's just one collector group with with both of those collectors in it I've added the VM-series firewalls into the Device log forwarding section on the collector group In the firewall policies, there is traffic hitting them and the action is set to log and forward to a log forwarding profile log forwarding profile has objects to forward all traffic and threat logs to panorama. I'm unaware if I'm issuing any configuration points in the above. If I go to the firewall and run a "debug management-server log-collector-agent-status" there are no agents listed. If I run a "show logging-status", I see a variety of collectors but they are all in a "lr - Inactive" state under connection status.   Any idea what I'm missing?   ... View more

We are attempting to deploy Cloud Formation Templates to create the autoscaling groups and firewalls but there are some steps around API keys that are confusing. From the pictures seen below, we are being asked for API keys for the panorama, and for the firewalls, and then the csp lisence key. My confusion points are as follows:   1. For the firewall API keys, we can't generate those as the firewalls aren't stood up yet. It's a chicken-and-egg scenario where it's asking for them in order to stand them up...??? 2. Not really sure why it's asking for the csp license key as another step has us create an authcodes file and put it in the /license folder in the bootstrap location in s3.       Any insight into this is much appreciated!   ... View more