Panorama import devices with simi lar config

BigPalo — Mon, 15 Sep 2025 08:47:02 GMT

Hi,

I have to import several FWs (branches) in Panorama. All the FW has similar config/object related to interfaces IP, objects, etc.

It could be any issue in the device groups or templated if all branches have same same internal IP interface. I thought to create a template and Device Group unique for each branch.

Thanks

Re: Panorama import devices with simi lar config

JayGolf — Tue, 16 Sep 2025 01:38:15 GMT

Hi @BigPalo ,

Having the same internal IP ranges/interfaces on different firewalls won’t break Panorama. Each fw keeps its own runtime config, but Panorama will flag conflicts if you try to push overlapping IPs within the same template.

A good approach is to use template stacks:

Site-specific templates for branch settings like interface IPs, VRs, and zones.
A global template for shared items such as server profiles, log forwarding, network profiles, interface management, zone protection (think any config that might be shared across sites)

For Device Groups, you can mirror this model:

A shared device group for common objects and policies.
Branch-specific device groups for rules or NAT configs unique to each site.

This way you keep consistency where it makes sense while still isolating site-specific configs. The biggest lift is upfront planning, but once you understand the nuances of your sites, Panorama management becomes much easier.

Good luck!

topic Panorama import devices with simi lar config in General Topics

Panorama import devices with simi lar config

Re: Panorama import devices with simi lar config