Focus

Panorama Administrator's Guide

Remove a Firewall from a Collector Group

Table of Contents

Remove a Firewall from a Collector Group

If you use a Panorama virtual appliance in Legacy mode to manage Dedicated Log Collectors, you have the option to forward firewall logs to Panorama instead of forwarding to the Log Collectors. For such cases, you must remove the firewall from the Collector Group; the firewall will then automatically forward its logs to Panorama.

To temporarily remove the log forwarding preference list on the firewall, you can delete it using the CLI on the firewall. You must however, remove the assigned firewalls in the Collector Group configuration on Panorama. Otherwise, the next time you push changes to the Collector Group, the firewall will be reconfigured to send logs to the assigned Log Collector.

Select PanoramaCollector Groups and edit the Collector Group.
Select Device Log Forwarding, click the firewall in the Devices list, Modify the Devices list, clear the check box of the firewall, and click OK three times.
Select CommitCommit and Push and then Commit and Push your changes to Panorama and the Collector Group from which you removed the firewall.

Move a Log Collector to a Different Collector Group

Configure Log Forwarding to Panorama