>
    Strata Copilot
    Change Between Panorama Management and Cloud Management
    Focus
    Download PDF
    Focus
    1. Home
    2. Panorama
    3. Manage Firewalls with Panorama
    4. Change Between Panorama Management and Cloud Management
    Download PDF
    Panorama

    Change Between Panorama Management and Cloud Management

    Table of Contents

    Change Between Panorama Management and Cloud Management

    Change the managed firewall management platform from a Panorama™ management server to cloud management, and vice versa.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama)
    • Device Management License
    • Panorama superuser role
    • Strata Cloud Manager Essentials or Pro
    The procedures below describe how to change the managed firewall management platform from a Panorama™ management server to cloud management, and how to change from cloud management to Panorama management.

    Change from Panorama Management to Cloud Management

    1. Log in to the Panorama web interface.
    2. Remove the log forwarding preferences for the managed firewall you want to move to cloud management.
      1. Select PanoramaCollector Groups and click the collector group that the managed firewall is associated with.
      2. Select Device Log Forwarding.
      3. Select (check) the managed firewall you want to move to cloud management and Delete.
        You can select (check) multiple firewalls when moving more than one managed firewall to cloud management.
      4. Click OK.
      5. Commit and Commit to Panorama.
    3. Set the management setting on the firewall.
      1. Log in to the firewall web interface.
      2. Select DeviceSetupManagement and edit the Panorama Settings.
      3. For Managed By, select Cloud Services.
      4. Click OK.
      5. Commit.
    4. Continue onboarding your firewall to cloud management.

    Change from Cloud Management to Panorama Management

    This is also required if downgrading a managed firewall to PAN-OS 10.2.2 or earlier release where cloud management of firewalls is not supported.
    1. Set the management setting on the firewall.
      1. Log in to the firewall web interface.
      2. Select DeviceSetupManagement and edit the Panorama Settings.
      3. For Managed By, select Panorama.
        The Panorama IP and device registration authentication key you originally added should still be configured. If not, see Add a Firewall as a Managed Device for more information to add your managed firewall back to Panorama.
      4. Click OK.
      5. Commit.
    2. Restart the management plane on the managed firewall.
      1. Log in to the firewall CLI.
      2. Restart the management plane.
        admin>  debug software restart process management-server
    3. Verify the managed firewall successfully connected to Panorama.
      1. Log in to the Panorama web interface.
      2. Select PanoramaManaged DevicesSummary and verify the managed firewall State is Connected.

    © 2026 Palo Alto Networks, Inc. All rights reserved.