topic Panorama - Template objects not shared by firewall cluster in General Topics

Panorama - Template objects not shared by firewall cluster

alemonnier — Mon, 03 Jan 2022 15:57:51 GMT

I added an existing firewall Active/Active Cluster with multiple Vsys into Panorama

Before the integration, some Device objects like "certificates" or "Local user database" were shared by the firewalls member of the cluster.

Now I need to create the objects twice times in each template of the firewalls.

Is it possible to manage it like before and the object only one time?

Regards

Re: Panorama - Template objects not shared by firewall cluster

PavelK — Tue, 04 Jan 2022 05:35:03 GMT

Thank you for the post @alemonnier

Yes, it is possible, but you might have to re-design your Template design. I would create 2 Template Stacks for each Firewall, then put on top of each Template Stack a Template with configuration for each Firewall. Template with configuration that is going to be shared by both Firewalls would be placed on the bottom of Template Stack.

Below is a sample:

Template stack 1
Template with Firewall 1 specific configuration

Template with general configuration

Template stack 2
Template with Firewall 2 specific configuration

Template with general configuration

After Templates/Template Stacks are created, assign each Firewall to own Template Stack. Each time you want to make configuration change for both Firewalls do the change in Template: "Template with general configuration". This will be inherited by all Templates in Template Stack.

Kind Regards

Pavel

Re: Panorama - Template objects not shared by firewall cluster

alemonnier — Wed, 05 Jan 2022 15:01:54 GMT

Hello @PavelK
Thanks for your answer.

I had this idea too but I was hoping that there was another solution 😅

Regards

Anthony