The following list describes known issues
in the Panorama plugin for Azure 1.0.0.
If you have more than one plugin installed on Panorama,
uninstalling the Azure plugin requires a Panorama reboot or a restart
of the configd process. So, please make sure to perform the uninstallation
during a maintenance window. For Panorama management servers in
an HA configuration, you must reboot both Panorama HA peers.
To restart the configd process :
Log in to the Panorama CLI.
Enter the following command:
debug software restart process configd
Verify if the configd process has restarted.
show system software status | match configdProcess configd running (pid: 3061)
For firewalls running PAN-OS 8.1, if the total number
of tags exceeds 7000 for a device group that contains a firewall
or a group of firewalls, an XML parsing error displays. This parsing
error causes the failure to register tags to the firewalls. For firewalls
running PAN-OS 8.0.x, this XML parsing error limit is met at 2500
For a Dynamic address group that is not referenced in
a Security policy rule, the list of registered IP addresses displayed
is not accurate. This is a display
issue only, and security policy is properly enforced on all your running
VMs in the VPC.
: Use the Dynamic address group in a Security
policy to see the most current list of registered IP addresses on
the firewall, or use the CLI command
show object dynamic-address-group all
an up-to-date list of IP addresses.
If the memory allocation on a Panorama virtual appliance
is lower than the minimum recommendation,
you cannot access and configure the plugin. Make sure to size your
Panorama appliance properly so that you can install the plugin.
Before you can uninstall the plugin on
you need to
for the plugin
your changes. Then, on
must delete the
account before you can
For HA peers, you must complete this process on the active peer
and repeat on the passive Panorama HA peer.