Collector Group for a Panorama HA pair in an Active/Passive High Availability Configuration in 10.1.0
4994
Created On 07/19/22 12:50 PM - Last Modified 06/25/25 02:46 AM
Symptom
Local Log Collectors for Panorama management servers in Active/Passive high availability (HA) configuration cannot be added to the same Collector Group (Panorama Collector Groups ) after upgrading to 10.1.0
Environment
- Panorama Active/Passive HA
- PAN OS 10.1.0
Cause
- After upgrading to 10.1.0 (base version) the HA connection is established successfully between the Active/Passive Panorama.
- However, when the log collector in Passive Panorama tries to connect to the local log collector in the Active Panorama, it fails due to no auth key sent by the Passive device log collector.
Resolution
Before you upgrade your Panorama servers to PAN-OS 10.1.x, configure HA (Panorama > High Availability), add the local Log Collectors of the HA peers to the same Collector Group, and upgrade to PAN 10.1.x
Refer