topic Re: Cannot add zone to security rule from panorama in General Topics

Cannot add zone to security rule from panorama

NEO.sergio.gonzalez — Tue, 09 Dec 2014 15:58:11 GMT

Hello there:

I'm new to palo alto through Panorama, so please excuse me if this is a silly issue. I created a template and a device group (without devices in it yet) and started to create everything else (addresses, groups, users, nats, sec policies, etc.). When I try to add a security policy and trying to select one of the already created zones, the drop-down list is empty.

Fro the same Panorama, I've another template and device group (with one device in it), and the zones appear in the drop down list when adding a security policy. The only diference between these device groups and templates is that one of the device groups has one device, the other doesn't.

What could be the reason I cannot see the zones I already created?

Best regards

Sergio

Re: Cannot add zone to security rule from panorama

ssharma — Tue, 09 Dec 2014 16:17:34 GMT

For the new device groups, you will have to manually enter the zone names for the 1st time, after that you will be able to pull from the drop down list. Make sure you take care of capitalization as well. Meaning if you have "Trust" on the device, you need to type Trust on the panorama as well, not "trust". Hope this helps.

Re: Cannot add zone to security rule from panorama

jburugupalli — Tue, 09 Dec 2014 16:20:23 GMT

Hello Serigo,

Not all zones on the firewall are available in the drop down list. Zone names have to be manually entered the first time. When creating new zones on a firewall, simply add the same zone to Panorama. Once the zones have been created in Panorama, they will become available for policy rules.

Please also refer the below link:

New Zone Not Visible in Panorama

Regards,

Jahnavi.

Re: Cannot add zone to security rule from panorama

NEO.sergio.gonzalez — Tue, 09 Dec 2014 16:53:30 GMT

Hello guys;

Thanks a lot for the help!. It worked.

Best regards

Sergio