topic Re: Panorama policies pushed to HA peer in General Topics

Panorama policies pushed to HA peer

emelcher — Wed, 19 Dec 2012 05:32:02 GMT

I've got an HA A/P pair where the primary is included in a device group and managed via Panorama. The configs are sycnhed and everything is matched; however, the peer has no inherited policy from Panorama. Any ideas?

Re: Panorama policies pushed to HA peer

sdurga — Wed, 19 Dec 2012 05:35:03 GMT

You have to connect your HA peer also to the panorama and push policies to both of your peers from the panorama.

- Sandeep T

Re: Panorama policies pushed to HA peer

emelcher — Wed, 19 Dec 2012 14:08:04 GMT

Sandeep, thanks! I tried this several times. Added it to the device group and pushed to the device only not the entire device group. Would this matter?

Would something in the HA config prevent the backup from getting policy from Pano for some reason?

Re: Panorama policies pushed to HA peer

kfindlen — Wed, 19 Dec 2012 16:09:26 GMT

Hi Erich,

Panorama pushed policies are not synchronized by HA between the peers. You will need to put both devices in the same device group in Panorama and then always push policies to the device group, or manually push the same policies to both devices of the HA pair.

Thanks,

-- Kevin

Re: Panorama policies pushed to HA peer

emelcher — Wed, 19 Dec 2012 19:11:45 GMT

Thanks! I got it working.