Shared Objects in Panorama

MichaelPrensky — Tue, 13 Aug 2019 01:06:25 GMT

Is there a concept of shared objects at multiple levels in Panorama ? For example, I can have a top level setting at the shared level which says password length is 15 characters and I want that to go to all firewalls. What I need, is a second shared level beneath that (like at the template stack level) that says anything in "This template stack" has a particular "zone protection profile." I know that you can add multiple templates to a template stack, but what I am trying to do is use some type of shared setting.

In my case, each "zone" will be different depending on the template being used, but behind the scenes, the "zone protection profile" is the same across all templates.

Everything I have read, says you have to copy the setting for "zone protection profile" for each template you plan on using it with. I was just hoping I could put the "zone protection profile" settings at a lower shared area that could be utilized by multiple templates.

Michael

Re: Shared Objects in Panorama

BatD — Fri, 13 Sep 2019 15:59:52 GMT

@MichaelPrensky I know it is an old pos,but t I have been struggling with the same issue and finally found that there is a solution to it.

My understanding is that you want to use one zone protection profile across multiple templates with different zones. The solution is very simple, but a little bit hard to explain.

Let’s say that you have Stack1 with Template1 with Zone1 and Stack2 with Template2 with Zone2 and you create zone protection profile “SharedZP” in Tempalte1 and apply it to Zone1. You also create SharedZP in Tempalte2 and apply it to Zone2.

Now you create another template Template0 with zone protection profile named SharedZP in it. You add Template0 to the top of Stack1 and Stack2, so you have Stack1: Template0,Template1 and Stack2:Tempalte0,Tempalte2. Any changes to SharedZP in Tempalte0 will be applied to all you stacks, as long as the zone protection profiles share the same name, because config in Tempalte0 will override the SharedZP config in Tempalte1 and 2.

The result will be that any firewall assigned to Stack1 and Stack2 will have the template specific zones, but will zone protection profile configured in the shared Tempalte0.

I hope it makes sense and it is what you need. I tested it and it worked fine.

topic Shared Objects in Panorama in General Topics

Shared Objects in Panorama

Re: Shared Objects in Panorama