https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-use-dg-layering-to-solve-daas-zone-issue/m-p/203555#M59964 <P>Is it possible to use DG layering to solve DaaS Zone issue??</P><P>1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.<BR />2. Assign Seattle DQT firewall to DG-AWS_DQA<BR />3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it will have both DaaS and DQT rules attached)</P><P>Not sure if this will work or I’m missing basic configuration that needs to be taken care of.<BR />any ideas?</P> Mon, 05 Mar 2018 15:25:00 GMT kpotru 2018-03-05T15:25:00Z https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-use-dg-layering-to-solve-daas-zone-issue/m-p/203555#M59964 <P>Is it possible to use DG layering to solve DaaS Zone issue??</P><P>1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.<BR />2. Assign Seattle DQT firewall to DG-AWS_DQA<BR />3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it will have both DaaS and DQT rules attached)</P><P>Not sure if this will work or I’m missing basic configuration that needs to be taken care of.<BR />any ideas?</P> Mon, 05 Mar 2018 15:25:00 GMT https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-use-dg-layering-to-solve-daas-zone-issue/m-p/203555#M59964 kpotru 2018-03-05T15:25:00Z https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-use-dg-layering-to-solve-daas-zone-issue/m-p/203616#M59982 <P>Hello,</P><P>From what it sounds like is that you want to use AWS for hosting several PAN's. However I think I'm not understanding all the acronyms. Would you be able to expand on your questions and/or provide a drawing?</P><P>&nbsp;</P><P>Regards</P> Mon, 05 Mar 2018 19:48:06 GMT https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-use-dg-layering-to-solve-daas-zone-issue/m-p/203616#M59982 OtakarKlier 2018-03-05T19:48:06Z