topic No idea. in Network Security

Panorama firewall

cisco8887 — Tue, 12 Mar 2019 07:11:17 GMT

Hi Guys,

Let me start by saying I appreciate this is a Cisco forum and I am a big fan of cisco.

I am however working for a client whom has PA firewall and PA does not allow you to post on their forum unless you have a subscription.

I am checking a Panorama and cannot see any logs.

How does one enable the logging functionality ?

Many thanks

No idea.

Philip D'Ath — Tue, 26 Jan 2016 04:39:49 GMT

No idea.

Google told me this:

https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/manage-firewalls-and-log-collection/configure-the-firewalls-to-forward-logs-to-panorama.html

same as what I found

cisco8887 — Thu, 28 Jan 2016 10:42:37 GMT

same as what I found

it only meantions how to forward logs

the PAs are linux boxes and can see they have the rsyslog and syslog service running but still no local logging

what is worse there is no option or internet article to switch it on or off.

log forwarding will be

yeo.larry — Mon, 01 Feb 2016 10:46:55 GMT

log forwarding will be triggered by the rules in PAN. If the packet matches the rule and the rule action has a log forwarding configured to Panorama direct. It does not require syslog per say.

Forwarding to syslog servers would then require server profile to be setup.

chrs

Larry

nothing I could see ! there

cisco8887 — Wed, 03 Feb 2016 10:58:32 GMT

nothing I could see ! there is no option to enable logging like you do with cisco local buffer logging!