topic Re: Panorama and single device policy in General Topics

Panorama and single device policy

dschuemann — Mon, 16 Mar 2015 23:09:44 GMT

What is everyone doing to manage FW policies that only apply to a single device? My thought was to create device groups for those one off devices.

Re: Panorama and single device policy

gbogojevic — Tue, 17 Mar 2015 08:34:38 GMT

Yes, you can create device group for this single device.

Re: Panorama and single device policy

torm — Tue, 17 Mar 2015 20:22:43 GMT

You could also use the "target" option in the security policy in Panorama. Then you can select to push specific policies to specific devices within a device group.

Re: Panorama and single device policy

pulukas — Tue, 17 Mar 2015 20:27:34 GMT

With single devices I would create a group just for the device policy in Panorama. This keeps all the options for policy centralized.

but if you have a lot of them and don't like the method of selection for management. You could put all these devices into a single group and then have no policies at all applied by Panorama for the group. Rather select the specific devices on the far left menu and manage them as local policies.