Device Group Hierarchy and Template Stacks in 7.x

[MRosloniec]

Howdy all!  I am really curious about Device Group Hierarchy and Template Stacks in 7.x.  There could be incredible value in utilizing these features in my environment.  The biggest question I have is:  Does Panorama AND the target firewall BOTH have to be on 7.x in order to take advantage of this management structure?  It sounds to me like the Firewall version is OK to be lower (we're currently 6.1.x and no plans right now to upgrade globally).  I would be more inclined to upgrade Panorama as it's less risky due to it not controlling traffic.

Thanks in advance!

Matt

[BenjAudy.MTL · Accepted solution]

Hi Matt,

I'm currently using v7.0.3 on Panorama and v6.1.7 on our firewalls and the templates and device group hierarchy are working. You just have to be aware that you will see configuration options in the templates that do not apply to your firewalls since some feature are only available in v7.

Benjamin

[cpainchaud · Accepted solution]

It will work but there is one "issue" to be aware of : LDAP servers domain no longer exist on PAnorama template v7 and will break your userid config if you used that option in your template.

[MRosloniec]

Thanks to both of you!  That is helpful!

Matt