topic How to add already configured FW to Panorama in General Topics

How to add already configured FW to Panorama

brian_kwitchoff — Fri, 09 Mar 2012 16:45:25 GMT

I must be missing a step because I am able to add a FW that has no policies or virtual systems to Panorama, but when I try to add a FW that is already configured with rules and multiple virtual systems, Panorama just says "shared policy status" "Out of Sync" and will not say it is connected. Is there a trick to get Panorama to allow me to add an already configured FW?

I found this statement in a KnowledgePoint link: "Local (i.e. device-level) policies and rule objects are managed by accessing each respective device’s context within Panorama. This doesn’t require an import…its just there." So I would think I should be able to do this.

Re: How to add already configured FW to Panorama

mschuricht — Fri, 09 Mar 2012 17:34:31 GMT

You must add the Panorama IP to the device under Device > Setup and add the devices SN to Panorama in Panorama > Managed Devices. A commit must be performed on both the device and Panorama.

Re: How to add already configured FW to Panorama

brian_kwitchoff — Mon, 12 Mar 2012 17:51:49 GMT

Thanks for the reply. Yes, those are the steps I followed but the Panorama will not accept my FW. I can telnet from the FW to Panorama via port 3978, but I cannot get it to show "connected" on Panorama. I thought it was related to the fact that the FW was already configured, but it is not since I can add other FW's that I put some configs on. I also thought maybe it was a version issue. Panorama is 4.1.0 and the FW's are 4.0.1, but one connects, the other does not. I guess I need to open a case with PA.

Re: How to add already configured FW to Panorama

mschuricht — Mon, 12 Mar 2012 18:02:45 GMT

This sounds like a bug.

Please open a case with support.