topic Re: Device Group Hierarchy and Template Stacks in 7.x in General Topics

Device Group Hierarchy and Template Stacks in 7.x

MRosloniec — Tue, 17 Nov 2015 16:12:43 GMT

Howdy all! I am really curious about Device Group Hierarchy and Template Stacks in 7.x. There could be incredible value in utilizing these features in my environment. The biggest question I have is: Does Panorama AND the target firewall BOTH have to be on 7.x in order to take advantage of this management structure? It sounds to me like the Firewall version is OK to be lower (we're currently 6.1.x and no plans right now to upgrade globally). I would be more inclined to upgrade Panorama as it's less risky due to it not controlling traffic.

Thanks in advance!

Matt

Re: Device Group Hierarchy and Template Stacks in 7.x

BenjAudy.MTL — Tue, 17 Nov 2015 16:49:29 GMT

Hi Matt,

I'm currently using v7.0.3 on Panorama and v6.1.7 on our firewalls and the templates and device group hierarchy are working. You just have to be aware that you will see configuration options in the templates that do not apply to your firewalls since some feature are only available in v7.

Benjamin

Re: Device Group Hierarchy and Template Stacks in 7.x

cpainchaud — Tue, 17 Nov 2015 17:21:49 GMT

It will work but there is one "issue" to be aware of : LDAP servers domain no longer exist on PAnorama template v7 and will break your userid config if you used that option in your template.

Re: Device Group Hierarchy and Template Stacks in 7.x

MRosloniec — Tue, 17 Nov 2015 20:17:13 GMT

Thanks to both of you! That is helpful!

Matt