topic Re: Importing and Managing Shared Gateway in Panorama in Panorama Discussions

Importing and Managing Shared Gateway in Panorama

BrianHill — Mon, 09 Dec 2019 19:12:57 GMT

Does Panorama support managing shared-gateways? I found one unanswered post on it, but I haven't found a conclusive statement on it in the official documentation.

I recently tried to import a firewall into Panorama, but sg1 didn't seem to import with the rest of the vsys(s).

Re: Importing and Managing Shared Gateway in Panorama

reaper — Thu, 12 Dec 2019 14:06:27 GMT

Panorama does support shared gateways. maybe there's an issue with importing SG's that TAC could take a look at and possibly fix

Re: Importing and Managing Shared Gateway in Panorama

Venkatesan_radhakrishnan — Thu, 13 Feb 2020 09:07:07 GMT

Hello Brian,

Did you get any update from TAC, I appreciate your response.

Regards

Venky

Re: Importing and Managing Shared Gateway in Panorama

Venkatesan_radhakrishnan — Thu, 13 Feb 2020 09:07:48 GMT

Hello Brian,

Did you get any update from TAC, I appreciate your response.

Regards

Venky

Re: Importing and Managing Shared Gateway in Panorama

BrianHill — Thu, 13 Feb 2020 17:27:58 GMT

I don't have enough information to share with TAC yet. I will attempt to import the same firewall with shared-gateway again soon and collect a show tech and screenshots if it fails again (I did not do this before).

My current assumption is that I just missed something in the import process during the last attempt.

Re: Importing and Managing Shared Gateway in Panorama

BrianHill — Tue, 10 Mar 2020 18:19:54 GMT

So - Panorama does NOT fully support Shared-Gateways. You can import/create the shared gateway, assign it to Interfaces, but you cannot manage the NAT policy or the Forwarding policy.

There is a feature request already --- FR ID:4412

Additionally (maybe a bug), while attempting to import the policy into Panorama, I ran into an issue with named objects used as NAT translations. These had to be changed to IP addresses on the local firewall, then re-imported before a commit to Panorama would work. And yes, they were imported into shared.

Also .... The shared-gateway NAT policy gets imported into the Panorama XML config. It can even be found by Global Search. Clicking on the names does nothing since there is no user interface to manage them.

Re: Importing and Managing Shared Gateway in Panorama

JimMcGrady — Tue, 14 Jul 2020 08:13:03 GMT

Has there been any progress with this issue? I'd like to include some NAT rules in a shared policy. But i cannot as each rule uses gateway specific IP addressing. And 'variables' cant be used in such rules.

Re: Importing and Managing Shared Gateway in Panorama

MalakIbrahim — Mon, 19 Jul 2021 21:57:29 GMT

Hello Brian

Can you please answer my question, https://live.paloaltonetworks.com/t5/general-topics/paloalto-shared-gateway-managed-by-panorama/td-p/420498

Re: Importing and Managing Shared Gateway in Panorama

shaneo — Thu, 30 Jun 2022 20:02:32 GMT

Hi Brian, did you ever make progress with this?

Re: Importing and Managing Shared Gateway in Panorama

aadiraj — Wed, 13 Jul 2022 18:20:15 GMT

Thanks for your question