topic Re: Benifit of Target Tab in security policy on Panorama. in General Topics

Benifit of Target Tab in security policy on Panorama.

yadsingh — Wed, 03 Aug 2016 10:27:58 GMT

Hi Guys.

Good day!
I would like to know that what is the benifit of target tab on Panorama.

For eg.

I create a shared policy. Now I push it to firewalls I choose using device group while commit.

Now I create shared policy and choose target (never done it). Do I need to commit on device group than?

What will happen if I commit on all devices but choose target as few?

Can anyone help me with this.

Re: Benifit of Target Tab in security policy on Panorama.

pulukas — Wed, 03 Aug 2016 22:17:10 GMT

Target is a way to have a particular rule only apply to some of the group members and not others. This is a way to keep rules in Panorama that might otherwise need to be created as local rules on just some firewalls inside the group.

Re: Benifit of Target Tab in security policy on Panorama.

yadsingh — Thu, 04 Aug 2016 11:37:43 GMT

Thank you for your reply. I am sorry if i am asking again. Does it differ from a commit on certain device group. If anyone has link for me to study on this it will be great.

Re: Benifit of Target Tab in security policy on Panorama.

pulukas — Fri, 05 Aug 2016 10:27:57 GMT

These topics are covered in the Panorama admin guide.

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide

Commit Panorama makes the changes active on the the mgmt system

commit device groups pushes the changes that are in Panorama to the devices or the group selected

These are the options to actually do the changes on the devices. As opposed to configuring the policy for where it will apply.

Re: Benifit of Target Tab in security policy on Panorama.

yadsingh — Fri, 05 Aug 2016 10:49:40 GMT

Finally understood it. You are awesome.