topic Re: Device Group Hierarchy in Panorama Discussions

Device Group Hierarchy

S_Williams901 — Tue, 14 Mar 2023 19:26:29 GMT

Currently all of my palos are under shared. I want to insert a layer between shared and my palos called Global. Is this possible without messing any settings that exist currently on firewalls?

Re: Device Group Hierarchy

TomYoung — Tue, 14 Mar 2023 20:45:44 GMT

Hi @S_Williams901 ,

It is absolutely possible. Create a new device group, and move the NGFWs to it. If you already have nested device groups, you can change the parent. I personally used Shared as my global and the next level as site- or function-specific.

Thanks,

Tom

Re: Device Group Hierarchy

S_Williams901 — Wed, 15 Mar 2023 02:20:12 GMT

I personally do not like shared for the simple inability to be able to clone an object and have it be shared as well.

Re: Device Group Hierarchy

TomYoung — Wed, 15 Mar 2023 02:36:53 GMT

Hi @S_Williams901 ,

You can move objects (and policies) in or out of Shared with the Move button on the bottom.

Thanks,

Tom