Firewalls HA - PANORAMA - Pending Only Template/Template Stack - Device-Group already
Firewalls HA 52XX - PANORAMA - Pending Only Template/Template Stack
Hello good afternoon, as always, thank you very much for your cooperation and for your time.
I have the following scenario:
A pair of Firewall on HA PAN OS 9.1.X, Active Passive. Currently at PANORAMA ( PAN-OS 9.1.X) level, that pair of firewalls already has a Device-Group already existing in PANORAMA, which contains all the security policies, nats and obejcts, of the Firewalls.
The Device and Network level configurations are completely local, only the Device Group exists in Panorama, but there is no Template/Template Stack for this pair of firewalls in HA.
This pair of firewalls are fully in production and are of high criticality.
The idea is to have everything homologated and that the firewalls have both its Template/Template Stack for Network and Device, as their device groups (already has the device group), therefore what is the recommendation, considerations, suggestions, details, etc, that you could propose me to integrate a template/template stack of PANORAMA, this pair of firewalls in HA A/P that already have Device-Group and it only needs to have its Template/Template Stack to be managed from PANORAMA, the Device and Network settings, not local, as these two sections are currently
Thank you very much for your time and your collaboration.
I remain attentive to your comments.
Best regards.


You can do it that way too, I would then reimport both, assign the same template to both, delete the 'local' config from the template, re-add them to the device group, and then push the config bundle to both