Not able to configure the custom certificate on the Local Log Collector

Not able to configure the custom certificate on the Local Log Collector

3730
Created On 12/22/23 07:26 AM - Last Modified 03/13/26 16:33 PM


Symptom


  • Not ability to configure the custom certificate for the local log collector
Local Log Collector Configuration
  • Custom certificate can be configured for dedicated log collector.
Customize the communication channels for a dedicated log collector
 
 


Environment


  • Panorama
  • Supported PAN-OS
  • Custom certificate


Cause


This is expected behavior.

Resolution


When Panorama operates in mixed mode, where both Panorama and the Log Collector run on the same device, a custom certificate is not required. Communication between Panorama and the local Log Collector occurs internally within the device, so the custom certificate is not used.

Custom certificates are supported only when using a dedicated Log Collector.


 



Additional Information


Configure Authentication with Custom Certificates Between Log Collectors
How to configure Secure communication between Panorama and Firewalls with custom certificates


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WJjCAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language