Palo Alto 5220-HA connected to Panorama with Templates and Device Groups and to these same Firewalls config and apply VSYSX, vsys2,vys3,vsys
Hello good evening Live Community, as always thanks for the collaboration and your time.
Any of you have had to do the following:
Detail Environment/infra: HA 5220 x 8 connected to Panorama with Device Groups and Template Stack.
What are you looking to validate and be able to do, generate new Virtual Systems for new traffic on these HA machines that are already productive connected to Panorama.
Per license with the base of 10 vsys is enough. Now, have any of you had to deal with something like this? i.e. firewall in HA, connected to Panorama, deploying vsys on them?
Does it involve reboots? Does it involve situations or limitations with Panorama and the vsys ? will it be transparent for the current Tempalte and Device Groups ? Is it necessary to do onboarding of the new vsys ? What are the major issues to review, validate and take special care for this environment?
These firewalls have a usage of 5 to 10% with luck, so they want to take advantage of the interfaces that are left over and take advantage of the hardware to use vysys and have another 2 or 3 firewalls for each HA.
Thank you very much for your comments, tips, details, help, recommendations and above all for your time and good vibes.
I remain attentive
Best regards