topic Re: How to dissociated Local and Global rule in Panorama Discussions

How to dissociated Local and Global rule

Boya — Wed, 07 Feb 2024 13:22:55 GMT

Hello,

I want to know a way to dissociated global rule and local rule, in order to change local rule on a firewall to global rule on the panorama.

We think about tagging global rules and make an export of rules without this tag on the Panorama, but I want to know if there is an other way to do it.

Thank for your help

Re: How to dissociated Local and Global rule

PavelK — Wed, 07 Feb 2024 21:36:09 GMT

Hello @Boya

I personally use different naming convention for all Panorama pushed configuration (policies, objects,...). The purpose of this is not only make it distinctive from local configuration, but also prevent an error when pushing the object with the same name as something configured locally. We are also using tags for all Panorama pushed policies.

I would leverage either different naming convention for all Panorama pushed configuration or tags you mentioned. Other than this can't think of any other way.

Kind Regards

Pavel

Re: How to dissociated Local and Global rule

Boya — Thu, 08 Feb 2024 15:24:39 GMT

Hello,

Thank you for your return, after seaching a bit I was thinking about using a configuration convertor like Expedition, but I don't if it show if rules are implement on Panorama, or on each firewall.

Regards,

Yacine