Not able to configure the custom certificate on the Local Log Collector
3730
Created On 12/22/23 07:26 AM - Last Modified 03/13/26 16:33 PM
Symptom
- Not ability to configure the custom certificate for the local log collector
- Custom certificate can be configured for dedicated log collector.
Environment
- Panorama
- Supported PAN-OS
- Custom certificate
Cause
This is expected behavior.
Resolution
When Panorama operates in mixed mode, where both Panorama and the Log Collector run on the same device, a custom certificate is not required. Communication between Panorama and the local Log Collector occurs internally within the device, so the custom certificate is not used.
Custom certificates are supported only when using a dedicated Log Collector.
Additional Information
Configure Authentication with Custom Certificates Between Log Collectors
How to configure Secure communication between Panorama and Firewalls with custom certificates