Shared Security Policy Rules

ce1028 — Fri, 29 Oct 2021 16:25:56 GMT

When you have multiple device groups, are you able to create shared security policies? When I try to select shared and create a security policy rule, the zones are blank.

Only workaround I can seem to find is create a security policy in one device group and clone it to the others

Re: Shared Security Policy Rules

TomYoung — Wed, 10 Nov 2021 18:22:21 GMT

Hi @ce1028 ,

Great question! I didn't realize zones were a limitation of the Shared device group. The zones are populated by the devices or reference templates in the device group. Since Shared is read only, it appears that you cannot save those fields.

What you can do is create a new device group, e.g. "Shared Rules", under Shared and make it the parent of the other device groups. (You can have 4 device groups in a hierarchy). You can add a reference template with zones to Shared Rules. Then you can create share security policies for all of your firewalls in this one device group.

Thanks,

Tom

Hi @ce1028 ,

I have an update! You can use Shared for common policy rules! You can move a rule from another device group and the zones work fine. Also, once you have imported the zones in a rule, they show up in the drop down for new rules. You could also type the zone in manually without the dropdown.

Hope this helps,

Tom

Re: Shared Security Policy Rules

ce1028 — Thu, 04 Nov 2021 01:05:46 GMT

Thanks @TomYoung . I did not realize it either until now.!

topic Shared Security Policy Rules in General Topics

Shared Security Policy Rules

Re: Shared Security Policy Rules

Re: Shared Security Policy Rules