topic Re: Panorama - policies and device groups in General Topics

Panorama - policies and device groups

abarnett — Tue, 10 Aug 2010 22:19:43 GMT

Hi All,

Does anyone know if there is a way to share policies between device groups in Panorama? I have several HA pairs of firewalls and would like to use the device group functionality for administering each pair, and would prefer not having to create the same policies for every group.

thank you!

Andrew

Re: Panorama - policies and device groups

pantac — Wed, 11 Aug 2010 22:02:33 GMT

when you are configuring the policies on panorama you will see a colum for target. This is which devices will be pushed that specific rule. you can use this function to push the policies to x number of devices thus you would not have to create a rule for each group of devices.

Re: Panorama - policies and device groups

abarnett — Thu, 12 Aug 2010 21:17:49 GMT

Thanks for your reply!

When I click on Target, the only devices displayed are the firewalls within the device group context that I've selected.

What I would like to do is share policies across multiple device groups.

The reason why is that I've created a set of base policies that apply to each campus, and it would be helpful if I didn't have to recreate them for each device group. As a work around I've been exporting the XML, copying the list of policies from one device group, pasting them into the others then importing that file back into panorama.

thanks again,

Andrew