Cloud NGFW I Cloud NGFW Integration with Panorama

We have deployed a cloud NGFW in azure using azure portal rule stack. The device is in production.

Now the requirement is to integrate this with panorama.

When we go to the device in Azure portal under security policy the options are greyed out. 

I

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

URGENT VPN failover help needed

Hello Everyone,

We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki.

The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are con

Upgrade to 11.1.4-h1 for both Panorama and managed firewalls

Hello,

I'm beginner with Palo Alto and want to ask somes questions:

I can upgrade panorama (10.2.10-h2 actually to 11.1.4-h1) but when i check updates in device deployement for my managed firewall (VM,PA-3200,PA-460-,PA-410) i don't see a similar

admin role panorama unable to push

Hi guys,

i need help for a stupid things but I cannot solve it.

My scenario: Panorama in 11.0.4-h1 with 40 firewall connected, one for every branch of my company.

What I want: the colleagues of the branch of Miami can made changes only template and d

Log Collector is error after upgrade OS version from 11.0.4-h2 to 11.1.x

I have an issue with Log collector ( local on Panorama server) after I upgrade OS version from 11.0.4-h2 to 11.1.2-h3 (and 11.1.2-h4) . The es on Log collector show status as “not running”.

- On active Panorama server:

+ See the Log collector ( local

Service Port overwrites Application default provided port (?)

Hello,

I would like to get a better understanding about the relationship Service vs Application when setting up FW rules:

Example:

"mysql" is provided with service TCP port 3306. 

If a rule is created using service TCP Port 58740 and in same rule und

CSR with more than 4 SANs

Hello,

We are operating a GlobalProtect environment that uses a generic Server SSL cert with a shared common name and the certificate lists multiple subject alternate FQDN names.

We are about to expand the GP Gateway numbers and need to add the S

Panorama - SDWAN Autogenerated Config Nightmare

I have spent the better part of two days deploying what should be a simple, standard SDWAN solution following the provided documentation. No matter how many times I try, every time I get to the point where I create the VPN Cluster, I get commit failu

Server error : Failed to add authkey. Failed to update DB.

Trying to simply generate an authkey in Pano so as to add devices.  Getting the message:
Server error : Failed to add authkey. Failed to update DB.

Sometimes it says I'm already "using that name" but there are zero valid authkeys present.

Any sugges

Panorama Device Specific Templates Network Settings

In our Panorama exists a Standard Template.  In the standard template I define ethernet1/5 with several sub interfaces.  At one of our locations I need to add a sub interface for vlan 88.  To tackle this, I have a device specific template that is in