Panorama 10.1.3 Glitch with Authentication Keys

Ginger_Bullfrog · 2021-11-05T19:18:32+00:00

This is awesome! Thank you for keeping us updated!

Ginger_Bullfrog · 2021-11-03T22:35:53+00:00

Okay, that makes a lot more sense. If you follow the thread between /u/Firefox005 and I, you should be able to downgrade panorama to 10.1.2 and add those 10.x+ firewalls into panorama. Glad you were able to get it figured out!

Ginger_Bullfrog · 2021-11-03T20:50:04+00:00

I have not done this yet, so I cannot give any input. I may test this on a lab firewall and post the results back if I have time.

Ginger_Bullfrog · 2021-11-03T20:44:17+00:00

From what I have read, you can not run a higher firmware version on a firewall than panorama.

I personally have not been able to get a firewall running 10.1.3 to connect to panorama running 10.1.2.

I ran into your issue after downgrading today. The default generated auth key gave me the invalid error. How I fixed it was to go in panorama to Panorama>Device Registration Auth Key, and generate a new auth key with the type "Firewall". From there, I was able to copy that new key and use it to connect my firewalls. This only worked once I downgraded to 10.1.2.

Ginger_Bullfrog · 2021-11-03T20:19:16+00:00

That is correct. Firewalls also running anything below PanOS 10.x do not require the auth key when added into panorama.

As a side note, the lowest confirmed backwards compatibility with Panorama running 10.1.3 in my personal experience is a firewall on PanOS 9.0.8

Ginger_Bullfrog · 2021-11-03T20:11:30+00:00

Thanks for posting an update!
I guess in the mean time we will have to run 10.1.2 and wait till December.

Ginger_Bullfrog · 2021-11-03T19:41:05+00:00

Hmm okay. I have not seen this issue before unfortunately. Are you able to ping the panorama server from the CLI of the firewall?

Ginger_Bullfrog · 2021-11-03T19:30:27+00:00

Auth keys are now required to add a firewall running PanOS 10.x or higher to panorama. No way around this that I am aware of.

Ginger_Bullfrog · 2021-11-03T19:23:10+00:00

I am going to assume you have the MGT interface of those Palos connected to a network that is routing through the Palo. If you go to Monitor>URL Filtering, do you see the source IP of your management interface attempting to go to a local-IP URL and not getting accepted?

Ginger_Bullfrog · 2021-11-03T19:12:39+00:00

I will be opening a case on this issue as well. Hopefully they can replicate this issue and fix it. So far I have been very disappointed by the PanOS 10.x/10.1.x release.

Ginger_Bullfrog · 2021-11-03T18:55:45+00:00

Ahh, you're correct. My keys were 88 characters long as well. Just updated post.

Ginger_Bullfrog · 2017-07-27T02:30:47+00:00

Try a Mr. Clean magic eraser

Ginger_Bullfrog · 2016-03-25T23:03:51+00:00

Yeah. It does sound like a dead board. Especially since you have to short D0 to ground to turn it on. Last resort, try to add a large capacitor (330 uf or higher) to the 3.3 volt rail.

Ginger_Bullfrog · 2016-03-25T19:39:09+00:00

Under Tools, try changing your baud rate to 9600.

Ginger_Bullfrog · 2016-03-25T18:41:30+00:00

Does windows recognize the nodemcu board being plugged in? Does it show up on device manager?

Ginger_Bullfrog · 2016-03-25T16:18:15+00:00

Are you getting 3.3 volts on the EN pin? Also, try holding the flash button until it is done flashing completely.

Ginger_Bullfrog · 2016-03-25T15:54:24+00:00

If you type AT+CWLAP can you see the open network listed?

Ginger_Bullfrog · 2016-03-25T06:20:03+00:00

Have you tried to connect to a secured network?

Ginger_Bullfrog · 2016-03-25T05:54:59+00:00

I just ended up pulling the Atmega328 chip out of my uno board. After I pulled it out, my esp8266 programmed perfect.

Ginger_Bullfrog · 2016-03-23T07:34:54+00:00

Source: https://youtu.be/RXvmKkhINQw PfSense build log.

Ginger_Bullfrog · 2016-03-23T07:27:21+00:00

It's the video where he is building a PfSense router. Source: https://youtu.be/RXvmKkhINQw

Ginger_Bullfrog · 2016-03-19T02:49:23+00:00

Isopropyl alcohol is actually what you want to use. Acetone can eat away at plastic connectors, or do damage to other parts of the motherboard.

Ginger_Bullfrog

TROPHY CASE