topic Panorama in Panorama Discussions

Panorama

Erdenebileg.Baasantogtokh — Mon, 13 Mar 2023 08:24:49 GMT

hi can you tell me the right answer of this question please

Which level of abstraction allows definition of common policy across multiple next-generation firewalls (NGFWs) in Panorama?

A. Zones
B. Interfaces
C. Zone profiles
D. Security profiles

Re: Panorama

Raido_Rattameister — Mon, 13 Mar 2023 12:59:29 GMT

If there would be no answers in the list I would say "Device Groups".

None of provided answers are good match.

But if you need to choose then "D. Security profiles".

Security profiles are configured under Device Groups > Objects.

Other options are under Templates.

Re: Panorama

TomYoung — Mon, 13 Mar 2023 13:53:07 GMT

HI @Erdenebileg.Baasantogtokh ,

The answer by @Raido_Rattameister is correct. Security profiles are in device groups and very easily implemented as a common configuration across all NGFWs. The other 3 answers are in templates, but they also require NGFW specific information. Zones require interfaces. Interfaces require IP addresses. Zone protection profiles require zones.

While not part of the question, to try to create a common template for zones, interfaces, or zone protection profiles would require configuration in the template stack to tie the NGFW specific config to each item. For Network configuration, it's easier to have duplicates in the templates. Perhaps that is why Panorama has a button to easily clone templates.

Thanks,

Tom