We have query regarding log collector group while upgrading Panorama M200 Ha pair from PANOS 9.1.6 to PANOS 10.0.5. Is there any issue in log collector status or log forwarding to collector group ? We have log collector group( with enable log redundancy) and local log collector of both panorama are added into same LC group in our production setup. HA and log collection config using management interface on both panorama. We have tested Panorama HA upgrade from PANOS 9.1.6 to PANOS 10.0.5 on testing setup.(We couldn't configured LC in testing setup) First we have upgraded Primary Panorama to Panos 10.0.5 , when it came up it went to non-functional state due to panos version mismatch. HA1 was up and secondary panorama became active. To make the upgraded Primary panorama device functional had to suspend Secondary panorama. HA1 was up even after suspending Secondary panorama. Is there any issue in log collection or LC status if we suspend secondary panorama If yes, then logs should redistribute from LC1 (pri panorama ) to LC2 ( Sec panorama ) after making secondary panorama functional. We want to keep production Sec Panorama in suspend state and want to monitor upgraded pri panorama for 7 days. So after upgrading panorama after 7 days , LC2 of sec panorama should have some logs stored in its logging disks.
... View more