Palo Alto Networks Certified Network Security Engineer (PCNSE)TroubleshootMedium
A network administrator logs into Panorama and observes that the 'Managed Devices' tab shows a firewall as 'Disconnected'. The firewall itself is operational and users can access the internet. A ping from Panorama to the firewall's management interface is successful. Which of the following is the MOST likely reason for the 'Disconnected' status?
- AThe firewall's HA status is in a non-functional state.
- BThe firewall's logging and reporting functionality is disabled.
- CThe firewall's commit status is out of sync with Panorama.
- DThe administrative password on the firewall has been changed, and Panorama has not been updated.
Show answer & explanationAnswer & explanation
Correct answer: D. The administrative password on the firewall has been changed, and Panorama has not been updated.
Panorama manages firewalls using administrative credentials. If the administrative password on the firewall is changed without updating Panorama's stored credentials for that device, Panorama will lose its ability to connect and communicate with the firewall, resulting in a 'Disconnected' status, even if the firewall is otherwise operational and reachable by ping.
Why the other options are wrong
- A. HA status is independent of Panorama connectivity. A non-functional HA state would not directly cause Panorama to show the device as 'Disconnected'.
- B. Disabling logging and reporting would affect log collection, but not the basic management connection status between Panorama and the firewall, which relies on administrative access.
- C. An out-of-sync commit status would show as 'Out of Sync' or similar, not 'Disconnected', as Panorama would still be able to communicate with the firewall.
Panorama Disconnected Firewall
A firewall appearing 'Disconnected' in Panorama often indicates an authentication failure, preventing Panorama from establishing a management session with the device.
- Ping success indicates network reachability.
- Administrative credentials are key for Panorama management.
- Password changes on the firewall require Panorama update.
Memory trick: Panorama's view needs proper 'Pass' to connect.