Why the Log Status of the Passive Firewall is displayed as "Not receiving logs" on the Device Security Portal?
Question
Why the Log Status of the Passive Firewall is displayed "Not receiving logs" on the Device Security Portal?
On the Device Security Portal, Firewalls table on the page for Firewalls < Administration displays as "Not receiving logs" on the Log Status for the Passive firewall.
Environment
- All PAN-OS versions
- The Passive state for High Availability
Answer
The Log Status of the Passive Firewall is usually shown as "Not receiving logs" except for a period of 30-60 minutes after it reboots.
Additional Information
<Device Security Integration Status with Firewalls>
https://docs.paloaltonetworks.com/iot/administration/monitor-iot-security-health/iot-security-integration-status-with-firewalls
The Passive Firewall doesn't forward logs to SLS even though SLS connections are established.
|
> request logging-service-forwarding status Logging Service Licensed: Yes Logging Service License Status: Fetch: Install: Upgrade:
Logging Service Certificate information:
Log Collector : RECEPTR04USSTG Registration : SSL : TCP : Conn Uptime : 0 Rate : 0 logs/sec traffic Not Available Not Available 0 0 0 (snip) |