Panorama 11 Upgrades

Any one running Panorama at 11.x code with managing the Palos that are running on 8.1.x code? . Currently we are running at 10.1.8-h2 code and we did not upgrade , because , the need for managing firewalls that are still running on 8.1. We came acros

Traffic to panorama

Hello,
I had a panorama instance in my cloud
Yesterday i removed my ha pair from panorama.
I have followed all steps, disabled ha sync, disabled the panorama objects, templates and network, checked the box to copy these configuration to my firewalls, de

How do I assign SD-wan interface profile to template when all sites have different speeds for fiber and cable.

How do I assign a SD-wan interface profile an interface in a template with 3 firewalls assigned to 3 groups based on site when each site has different speeds for each ISP? Do I have to go against palo alto recommendations and use 3 templates?

Site 1

Export details of Global Protect Client users running below version less than < 5.2.12

Hi All,

Is there any way to export the reports from Panorama automatically for the scheduled time from Panorama whose Global protect version is less than 5.2.2

Data Redistribution Agent - system log message

Hi,
In our Panorama system log I see a lot of logs giving the output shown below:

Event: connect-agent-failure )
Description: 'Redistribution Agent "data redistribution agent id"(vsys1): details: close connection to agent'

I see this messages are comin

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

unable to connect to Panorama error "TSL-SESSION-DISCONNECTED"

Hi Team,

I am unable to add my gateway to Panorama, It is showing system logs TSL-SESSION-DISCONNECTED in panorama,

It is connecting and disconnecting every minute. When I supply command show devices in panorama, The predefined certificates not

The Panorama IP has been changed on the firewall, but the firewall still has a session to the original IP

Panorama is used for management and log collection. The IP address of Panorama has not changed. There is a firewall outside Panorama, which maps the 3978 port of the firewall's exit IP to Panorama. The managed firewall was originally configured with

Dynamic Address Group values in Panorama

Is there a way to have the values from a dynamic address group show in Panorama if its placed in the group on a firewall itself? I was looking for a central place where a device can manually be removed from the group if needed and redistributed to al

URL download blocked and unable to remove block for user to access the download.

How do I get a URL download unblocked that is not on the block policy in Panorama, found to be low risk in test a site, and found to be benign when analyzed by wildfire.

Primary palo alto 220 missing on panorama but I can access it via CLI

Needing your help I'm newbie on Palo alto . We have a Panorama on one of our sites this is PA 200 before I'm seeing the primary on panorama but not its not. Although I can access it via SSH and use the CLI but when I run the show running sync-to-pano