January 2025 Spark User Summit: Panorama Templates and Strata Cloud Manager Config Management

[CharlesBuege-Fuel]

For those who weren't able to join us, on Thursday, January 23, 2025, Fuel was joined by Shiva V and Bingjun Wang on two very different ways of handling templates and configurations. Shiva starts off by going over how using Panorama templates, Panorama template stacks, and the use of template variables. This allows a Panorama user to be able to keep the number of templates and stacks to a minimum making the upkeep and ongoing maintenance of Panorama configurations much easier. Bingjun Wang shows us how we can leverage Strata Cloud Manager without requiring Panorama in your environments. After showing us how to get the different types of NGFWs to connect to SCM, Bingjun explains how you can eventually migrate to SCM and either greatly reduce, if not completely eliminate, the need for Panorama.

Session 1:  Panorama Templates and Template Stacks

Session 2:  How to use Strata Cloud Manager without Existing Panorama

 

Join the Next Spark event — Become a Fuel Member Today!

Becoming a member of the Fuel User Group is a great way for individuals and organizations using Palo Alto Networks products and services to get access to a wealth of resources — knowledge, training, virtual test labs, networking opportunities, and tools which can significantly improve proficiency and effectiveness in cybersecurity and IT operations. As a reminder, membership is free!

Additional Information

• Have topics that you’d like to hear about in the future during a Spark session? Submit your ideas here.
• Curious to learn more about Fuel? Explore the Fuel website for details on their different chapters, events, and more.
• Feel free to share your questions, comments and ideas in the section below or email fuel@fuelusergroup.org with questions and comments.
• Watch all past Spark events via LIVEcommunity's YouTube playlist: Fuel Spark Events On-Demand.

[PS007]

I can't understand Shiva's response on using variable at template level for HA config. How it can be best practice to define HA settings at template/variable level ?  If that is to be done I have to manage hundreds of template & may be double the # of variables just for HA settings. We normally follow practice to define HA at local firewalls/peer level. It is easy & straightforward. If this is not advised please help me understand that. 

[PS007]

Question for Bingjun

1. Can ZTP port be configured as default mgmt port instead of eth1/1 before onboarding to SCM. We want all firewalls to use their default mgmt port as eth1/1 is standard port for other zone

2. Is Pro serv necessary for onboarding non Prisma access firewalls ? Can't we do it ourselves ?