Shared Application Groups in Panorama Version 5

Anon1 — Mon, 04 Feb 2013 22:28:00 GMT

In Panorama Version 5 it can be configured that address and service objects are only applied to firewalls which actually need these objects because they are used in the policy. Unused objects are not pushed to the firewall. However we found out this only applies to address and service objects (as the setting "Share Unused Address and Service Objects with Devices" mentions - we disabled it to not overload small device models). Shared Application Groups are still being pushed to all connected firewalls even if they are not used there. Is there any limit on Application Groups that can be configured per device model (I could not find anything in the documentation)? When Palo Alto Networks introduced the option regarding address and service objects, why did they not include Application Groups to this logic as well?

Re: Shared Application Groups in Panorama Version 5

sdurga — Mon, 04 Feb 2013 22:45:28 GMT

Currently there is no limit on the number of application-groups that can be built for a platform, and I believe it is for the same reason the option that you are looking for is not included in the Panorama.

topic Re: Shared Application Groups in Panorama Version 5 in General Topics

Shared Application Groups in Panorama Version 5

Re: Shared Application Groups in Panorama Version 5