Focus

Panorama Administrator's Guide

Troubleshoot Connectivity to Network Resources

Table of Contents

Troubleshoot Connectivity to Network Resources

Test the running firewall configuration for connectivity to important network resources.

Perform connectivity tests for managed firewalls to ensure that your managed devices can connect to all appropriate network resources. Test the device configuration for your managed devices to ensure the running configuration appropriately secures your network by allowing you to verify that the configurations pushed to your managed devices still allow those devices to connect to resources such as your Log Collectors, configured External Dynamic Lists, and the Palo Alto Networks Update Server. Additionally, you can execute routing, WildFire®, Threat Vault, ping, and traceroute connectivity tests to verify that Panorama™ and managed devices can access any external network resources critical to the operation and security of your network. After the results are generated, you can Export to PDF for auditing purposes.

The Ping connectivity test is only supported for firewalls running PAN-OS 9.0 or later releases.

Log in to the Panorama Web Interface.
Select PanoramaManaged DevicesTroubleshooting to perform a connectivity test.

You may also run a policy match test from the Policies tab.
Enter the required information to perform the connectivity test. In this example, a Log Collector Connectivity test is run.
1. Select Log Collector Connectivity from the Select Test drop-down.
2. Select device/VSYS and select the managed firewalls to test.
3. If necessary, enter any additional information relevant for your connectivity testing.
Execute the Log Collector connectivity test.
Select the log collector connectivity Results to review the Log Collector connectivity status for the selected devices.

Troubleshoot Policy Rule Traffic Match

Generate a Stats Dump File for a Managed Firewall