Auto de-register devices in Panorama

[PA_nts]

Hi All,

so managed to do some automatons to the point where we can spin up a PA VM, auto register into Panorama and have policies and template configs applied all automated..

The plan is to potentially spin up and tear down large number of VMs in the cloud when needed.

one question..

- when a device is torn down, how can we 'auto de-register' it from panorama as this keeps the vm listed after tear down and then needs to be manually removed from device groups and templates

not seeing any documentation on this

thanks in adv

[JimmyHolland · Accepted solution]

Assuming you are using the bootstrapping feature to provision the VM-Series (as that does the Panorama registration, and assignment of Device Groups and Template Stacks), there is a plugin for Panorama which will do the Panorama removal and de-licensing for you when a VM-Series goes offline for x number of hours, the assumption being that after x hour offline the VM-Series is not coming back, it has been de-provisioned.

Otherwise, whatever process/pipeline/automation it is which is kicking off the de-provision of the VM-Series, could also do an API call to Panorama to de-register the VM-Series from the list of Managed Devices.

Hope that helps