topic Importing device into Panorama with shared objects in General Topics

Importing device into Panorama with shared objects

ghostrider — Mon, 25 Apr 2016 16:35:51 GMT

Hello

I would like to import device into Panorama with all objects as shared into Panorama. I read the below line from PA documentation

Import devices' shared objects into Panorama's shared context is enabled by default, which means Panorama imports objects that belong to Shared in the firewall to Shared in Panorama

Now the question is the how to make device objects as shared? Means before importing the firewall into Panorama how I can make objects shared on the firewall? or suggest me better way

Re: Importing device into Panorama with shared objects

reaper — Tue, 26 Apr 2016 11:38:21 GMT

the short answer: you can't

an object on a firewall is created either as shared or as vsys specific but can't be switched after creation. you'd need to re-create the objects you'd like to be shared as such

the long answer: if you export the config file you can basically move objects from one aspect to the other

Re: Importing device into Panorama with shared objects

ghostrider — Tue, 26 Apr 2016 15:34:33 GMT

Hi Reaper

Thanks for the reply. When I create any object like address object, it is not giving me option to make shared. How I can create shared object on firewall and how to convert existing objects into share on firewall before importing into panorama. Appreciate your time.

Re: Importing device into Panorama with shared objects

reaper — Wed, 27 Apr 2016 09:40:00 GMT

only if you have multiple VSYS will you be able to select vsys 1, 2, .. or 'shared'

if multi-vsys is not enabled, your object will be 'shared' by default