PA-7000 Series Firewall Installation
chassis status slot s3
If the cards are functioning properly, the status will show an output similar to the following:
Slot...Component........Card Status.....Config Status
3 .....PA-7000-20G-NPC .Up..............Success
STEP 5 |
Connect the network cables and the NPCs are ready to process network traffic.
Configure a Log Card Port on a PA-7000 Series Firewall
A log card port is required if you configure the firewall to forward logs to an external system or
if you configure a WildFire
™
forwarding profile. You configure the log card port on one available
port on a Network Processing Card (NPC) using the type Log Card. This is required because the
traffic processing and logging capabilities of a PA-7000 Series firewall exceeds the capabilities of
the management port, which is the port used for these services on other firewall models.
A log card port is not required if the firewall has a Log Forwarding Card (LFC) installed. See
PA-7000 Series Firewall Log Forwarding Card (LFC)
When configuring an LFC interface for HA, ensure that you configure different IP
addresses on the peers.
This special port is used by the firewall for the following log forwarding functions: syslog, emails
generated by the firewall, SNMP, WildFire file forwarding, and Panorama log forwarding. Log
forwarding to Panorama requires PAN-OS 8.0 or later. In PAN-OS 7.1 and earlier releases,
Panorama queries logs stored on the PA-7000 Series firewall.
You can set only one NPC port on the firewall to the type Log Card. If you enable log
forwarding and this port is not configured, a commit error occurs. Also ensure that this
port can reach the servers that will receive content from the firewall. For example, if you
configure a log forwarding profile for a syslog server, this port must be able to reach the
syslog server. As another example, if you enable WildFire file forwarding, the interface
must be able to reach the WildFire cloud server or if applicable, a private WF-500
appliance.
When selecting the NPC port to use as the log card port, you must use a 1 Gbps port
connection or higher to ensure that the firewall can maintain log forwarding rates.
STEP 1 |
Select
Network
>
Interfaces
and click the
Ethernet
tab.
STEP 2 |
Select the
Slot
and
Interface Name
. For example, to configure ethernet2/1, expand Slot 2
and click on ethernet2/1.
STEP 3 |
Select the
Interface Type
drop-down and select
Log Card
.
STEP 4 |
If multiple virtual systems are enabled, select the desired virtual system in the
Config
tab.
For details on the LPC and virtual systems, refer to
Configure a PA-7000 Series Firewall for
PA-7000 Series Firewall Hardware Reference
101
©
2023 Palo Alto Networks, Inc.
