topic Re: Nested Device Group in Panorama in General Topics

Nested Device Group in Panorama

Sujanya — Thu, 13 Oct 2022 18:52:08 GMT

How to create nested device group in panorama, is the same device group can be part of multiple nested device group.

If yes, how the policy priorities would be.

Please suggest here.

Re: Nested Device Group in Panorama

PavelK — Thu, 13 Oct 2022 22:38:26 GMT

Hello @Sujanya

thanks for the post!

You can configure nested device group in the tree of up to 4 device group levels. The policies, objects,... are inhereted from upper device group in the hierarchy. Further details are in documentation: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/device-groups/device-group-hierarchy

Kind Regards

Pavel

Re: Nested Device Group in Panorama

Sujanya — Fri, 14 Oct 2022 14:01:51 GMT

Hi Pavel,

Thanks for the information. We do have single device group which needs to be part of two separate device group( which is for different purposes). What we heard is while creating the device group in Panorama , we can call the same device group by bifurcating via vsys. Please let us know if you have any suggestion on the same or any documentation which can help us in implementing it in our network.

Re: Nested Device Group in Panorama

PavelK — Sun, 16 Oct 2022 22:25:48 GMT

Thank you for reply @Sujanya

unfortunately, I never came across what you are referring to and have not found anything related in documentation. I do not see such option while creating a device group. A firewall as well as vsys can be assigned to only one device group: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/manage-device-groups/create-a-device-group-hierarchy

Kind Regards

Pavel

Re: Nested Device Group in Panorama

Sujanya — Wed, 19 Oct 2022 12:08:23 GMT

Hi @PavelK ,

Thanks for the details. This solved my queries.