Panorama firewall

[cisco8887]

Hi Guys,

Let me start by saying I appreciate this is a Cisco forum and I am a big fan of cisco.

I am however working for a client whom has PA firewall and PA does not allow you to post on their forum unless you have a subscription.

I am checking a Panorama and cannot see any logs.

How does one enable the logging functionality ?

Many thanks

[Philip D'Ath]

No idea.

Google told me this:

https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/manage-firewalls-and-log-collection/configure-the-firewalls-to-forward-logs-to-panorama.html

[cisco8887]

same as what I found

it only meantions how to forward logs

the PAs are linux boxes and can see they have the rsyslog and syslog service running but still no local logging

what is worse there is no option or internet article to switch it on or off.

[yeo.larry]

log forwarding will be triggered by the rules in PAN. If the packet matches the rule and the rule action has a log forwarding configured to Panorama direct. It does not require syslog per say. 

Forwarding to syslog servers would then require server profile to be setup.

chrs

Larry

[cisco8887]

nothing I could see ! there is no option to enable logging like you do with cisco local buffer logging!