top of page

General discussion

Public·2 members

Firewalls HA - PANORAMA - Pending Only Template/Template Stack - Device-Group already

Firewalls HA 52XX - PANORAMA - Pending Only Template/Template Stack

Hello good afternoon, as always, thank you very much for your cooperation and for your time.

I have the following scenario:

A pair of Firewall on HA PAN OS 9.1.X, Active Passive. Currently at PANORAMA ( PAN-OS 9.1.X) level, that pair of firewalls already has a Device-Group already existing in PANORAMA, which contains all the security policies, nats and obejcts, of the Firewalls.

The Device and Network level configurations are completely local, only the Device Group exists in Panorama, but there is no Template/Template Stack for this pair of firewalls in HA.

This pair of firewalls are fully in production and are of high criticality.


The idea is to have everything homologated and that the firewalls have both its Template/Template Stack for Network and Device, as their device groups (already has the device group), therefore what is the recommendation, considerations, suggestions, details, etc, that you could propose me to integrate a template/template stack of PANORAMA, this pair of firewalls in HA A/P that already have Device-Group and it only needs to have its Template/Template Stack to be managed from PANORAMA, the Device and Network settings, not local, as these two sections are currently

Thank you very much for your time and your collaboration.

I remain attentive to your comments.

Best regards.

37 Views
Reaper
Reaper
2022年11月04日

You can do it that way too, I would then reimport both, assign the same template to both, delete the 'local' config from the template, re-add them to the device group, and then push the config bundle to both

Members

  • Reaper
  • sahil salokhe
    sahil salokhe
  • Whatsapp
  • Amazon
  • X
  • LinkedIn

Contact
PANgurus BV
VAT: BE0769507136
INFO@PANGURUS.COM
+32 (486) 986 753

©2020 by PANgurus.

bottom of page