Panorama template limitations

tamilvanan — Fri, 31 Dec 2021 10:34:23 GMT

Hi Folks,

We had recently migrated HA Firewall pair to Panorama.

We had observed that after migration the HA Settings (HA peer IP address, device ID, etc), Management IP address are over-ridden locally on the firewall.

I had gone through an documentation stating the limitation of templates. There it is mentioned as

Configure the IP addresses of firewalls in an HA pair.

I am not able to understand the exact meaning of the above statement whether it is the HA IP addresses configured under HA settings or all the system specific IP addresses which differs b/n Active Passive pair such as HA IP address, Management IP address, Gateway IP address given for Management interface that have limitation with regards to the template

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/template-capabilities-and-exceptions.html

Thanks in advance

Re: Panorama template limitations

nikoolayy1 — Wed, 12 Jan 2022 11:57:48 GMT

I think that they may refer to this:

How to use one Template stack for a high availability Firewall ... - Knowledge Base - Palo Alto Networks

Also I don't think you can configure the HA in Panorama:

Migrate a Firewall HA Pair to Panorama Management (paloaltonetworks.com)

topic Panorama template limitations in Panorama Discussions

Panorama template limitations

Re: Panorama template limitations