CNGFW for Azure Troubleshooting
Use this section to diagnose and resolve connectivity and registration issues between
your Cloud NGFW for Azure resource and Panorama. Most issues fall into two categories:
general network path connectivity or authentication credential expiration.
This page covers troubleshooting procedures for maintaining a stable integration between
your Cloud NGFW for Azure and Panorama. If your resource displays an Unhealthy or
Degraded status in the Azure portal with the reason Firewall cannot
register with Panorama, you should investigate underlying network pathing and
configuration requirements.
In cases where the network path is functional but registration still fails, the issue may
be related to credential validity rather than connectivity. When a Panorama Auth Key has
expired, preventing the resource from moving to a healthy state. This subsection guides
you through the necessary steps to resolve the issue using the Panorama Azure Plugin
(version 5.2.3 or higher), including using CLI commands to force-create a new auth key
and generating a fresh registration string for the Azure portal.
