Review the TCP ports and Fully Qualified Domain Names (FQDN) that you must enable on your network
communication and between the Palo Alto Networks Next-Gen Firewall (NGFW) and Strata Cloud Manager. Communication on these TCP ports and FQDNs must allowed on your
network to successfully manage your firewalls from Strata Cloud Manager.
You must allow the following app, FQDNs, and TCP ports on your network to enable connectivity
between the firewall and Strata Cloud Manager.
The Virtus service is a device connectivity service that facilitates the connection
between the firewall and Strata Cloud Manager. The FQDN and/or IP address for the
region where your Strata Cloud Manager tenant is deployed must be allowed on your
network for the firewall to successfully connect to Strata Cloud Manager. The
firewall cannot connect to Strata Cloud Manager if the FQDN or IP address is
blocked.
Required App-ID and Port for Strata Cloud Manager
App-ID
TCP Port
panorama
3978
Required FQDNs, IP Addresses, and Ports for Strata Cloud Manager
You must allow the following apps, FQDNs, and TCP ports
on your network to forward logs from the managed firewall to Strata Logging Service (SLS). For more details, see the TCP Ports and FQDNs Required
for (SLS).
You must allow the following FQDNs, and TCP ports on your network to enable your managed
firewalls to install the device certificates for Strata Cloud Manager.
