topic Re: adding zone and subinterfaces in General Topics

adding zone and subinterfaces

FWPalolearner — Sun, 19 Apr 2020 17:30:26 GMT

Hello

I have panorama 9.0.4 and palo alto fw 8.1.7

we are not using templates

I have to create 6 zone and subinterfaces . So do i need to create them locally on the firewall ?

Will it get sync to panorama automatically ? or do i have to do something to sync with Panorama ?

or do i have to load the device to panorama and change the context to the active FW and then do the changes ?

Please suggest how to make zone and subinterfaces

Next to this , the zone which we have to make are already part of another firewall - so can we create same name of zones on two different firewalls ? but both are managed through Panorama

Re: adding zone and subinterfaces

kiwi — Mon, 20 Apr 2020 09:22:03 GMT

Hi @FWPalolearner

If you don't use templates then configure the zones and interfaces locally on the firewalls.

The panorama sync doesn't care about local config so it shouldn't be impacted by performing local config changes.

You're not using templates so that part isn't managed by Panorama. Using the same zones on different firewalls shouldn't matter.

Cheers,

-Kiwi.

Re: adding zone and subinterfaces

FWPalolearner — Mon, 20 Apr 2020 16:49:25 GMT

Hello Kiwi,

Thanks for your reply.

My point is suppose if I create a zone "ABC" locally on the firewall, will that zone be visible in panorama ?

are using device groups so if I have to create a rule for zone ABC , will panorama automatically shows it or do I have to click on add new zone in panorama with same name "ABC"

Re: adding zone and subinterfaces

FWPalolearner — Tue, 21 Apr 2020 20:45:51 GMT

Anyone please ?

Will the zone automatically appear in panorama while creating the rules ?

Re: adding zone and subinterfaces

kiwi — Wed, 22 Apr 2020 06:52:29 GMT

Hi @FWPalolearner ,

No, zones created locally on the FW will not appear automatically in PAnorama:

NEW ZONE NOT VISIBLE IN PANORAMA

Cheers,

-Kiwi.