An administrator is using Panorama to manage me and suspects an IKE Crypto mismatch between peers, from the firewalls to Panorama. However, pre-existing logs from the firewalls are not appearing in Pa

Question

Options

• AExport the log database.
• BUse the import option to pull logs.
• CUse the ACC to consolidate the logs.
• DUse the scp logdb export command.

• A
  71% (22)
• B
  6% (2)
• C
  6% (2)
• D
  16% (5)

Explanation

Option A is correct because when firewalls have pre-existing logs that aren't forwarding to Panorama, the administrator must use the Export Log Database function, which pushes the firewall's existing local log database to Panorama. This is the designated mechanism in PAN-OS to retroactively populate Panorama with logs that were captured before or outside of the normal log-forwarding flow.

Option B is wrong because Panorama does not have a native "import" pull mechanism to retrieve logs directly from managed firewalls on demand - log collection is a push model from the firewall side.

Option C is wrong because the ACC (Application Command Center) is an analytics and visualization dashboard; it aggregates and displays logs already present in Panorama, but it cannot fetch logs that haven't been forwarded yet.

Option D is wrong because scp logdb export is a CLI command used to copy the log database to an SCP-capable destination (like a backup server), not to Panorama - it's a backup/migration tool, not a Panorama sync tool.

Memory tip: Think "E for Export = E for Existing logs." When pre-existing logs are missing from Panorama, you Export the log database from the firewall to push what already exists up to Panorama.

No community discussion yet for this question.