Panorama Discussions

Panorama PUSH scope shows stale object - 10.2.5-h1

Hi Team

We see an issue with Push Scope on Panorama running Pano-OS version 10.2.5-h1. We see 2 objects still under Push Scope when we have already completed the Push.

These are two objects which are present no matter what changes you in do in Secur

ikev2 site to site VPN between PA and ASA

Hi All,

I have a site to site VPN configured to client's ASA.

The VPN stays stable until the phase 2 lifetime expires and then never comes up until interesting traffic is generated from client(ASA) side.

On checking the PA logs, I see a couple of

is it possible to change raid configuration from raid-1 to 'raid-0 or raid-5' in Panorama M-700

Hi

We recently received a request from a customer who wanted to increase the panorama capacity of the M700 to 90TB or more.

The M700 Maximum disk size is known to be 48TB because the disk of '8TB x12' is configured as 'raid 1'.

Is it possible to in

Software status in GUI show blank, null and unknown on Passive panorama

HI ,

we just recently upgrade our panorama VM active and passive to 11.1.4-h1 version and upgrade successfully

However, we found it weird that on secondary panorama , software status showing blank, null and unknown on the installed version as sho

Panorama Certificate Import Api Does not work when targeting a Vsys

See attached document.  When using the API in Panorama and trying to target a vsys, it always imports to the shared location.  The documentation says it supports this.  Here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api/pan-os-

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors.
We are currently using Panorama in VM mode.

1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hyperviso

Syslog Sending From panorama

HI

I have a question.
If panorama sends syslog to the syslog server, is it only the panorama syslog that is sent or all the logs of the local palo devices managed by panorama?

Thanks & Regards.

Panorama

New firewall refreshment to a new model and introduce to Panorama

We have Panorama which manage several firewalls. One of it is PA-3020 and we would like to do a refreshment with PA-440. 
In the current Panorama, there is already device group and template reference to the PA-3020. 
My question, what is the best way t

API/CLI - how to access subset of devices by tag assigned to them?

Hi there, 
I'm going to use device's tags to have another dimension beside of template/device groups. 
I've assigned a tag to subset of devices (using Panorama>Managed devices WebUI), but I'm really lost how I can get access/filter devices by this tag

Removal of Targets from Policy

I have a number of firewalls managed in Panorama that are to be decommissioned.

Some of these firewalls are in Device Groups with several thousand policy entries.  Annoyingly they have been assigned the firewalls in the target column.

Does anyone

Cloud NGFW I Cloud NGFW Integration with Panorama

We have deployed a cloud NGFW in azure using azure portal rule stack. The device is in production.

Now the requirement is to integrate this with panorama.

When we go to the device in Azure portal under security policy the options are greyed out. 

I

what is elastic+ management plane cpu process?

Can anyone explain why elastic+ is showing in show system resources command?

17162 elastic+  20   0 3923.0g  38.0g   3.3g S   5.9 15.1 168339:53 java

18242 elastic+  20   0 3921.6g  38.0g   3.3g S   5.9 15.1 163177:55 java

top - 19:19:39 up 104 d

URGENT VPN failover help needed

Hello Everyone,

We have an existing policy-based site-to-site VPN between our Palo Alto and client's Meraki.

The current VPN is to their Primary WAN IP address(Primary ISP). Now they have a secondary ISP. Both the primary and secondary ISPs are con