topic Re: Security rules on middle level DGs in General Topics

Security rules on middle level DGs

Miroslaw_Iwanowski — Tue, 22 Jan 2019 22:09:42 GMT

I have three templates in a stack and three levels of device groups. I want to create a leveled policies based on security zones. Let's say I have a secuity zone called GlobalProtect.

Let's say I have:

DG-Standard

|-------DG-Management

|-------------DG-ISOC

I want to create GlobalProtect rules on level 2 of device groups. The problem is that all security groups are visible only if I select the the DG-ISOC device group so I cannot put any policy on DG-Management or DG-Standard level.

Is there a way to make 'common' rules based on security zones?

Re: Security rules on middle level DGs

Remo — Sat, 26 Jan 2019 21:14:15 GMT

Hi @Miroslaw_Iwanowski

What do you mean with "security groups"? Zones, right? If yes, then try to write the zone name in level 2 device group manually. I think this os only a reference check problem in panorama.

Re: Security rules on middle level DGs

Miroslaw_Iwanowski — Mon, 28 Jan 2019 06:35:35 GMT

Ahhh, I haven't though about that! Thank you.