How to add palo to multiple device groups

[M.Allen]

I am deploying two new firewalls. I have clone the existing templates and created new template stacks.

I am not adding the firewall to the correct device groups and they have two VRFs in use. The old firewalls are detailed as YGC-FW1 and 2. The new are YGC-Palo-DC1 and 2. I have added the new to one of the new VRF groups but now I am unable to add them to the second... how to I add to two?

The old firewalls exist in two groups?

Also the BCU VRF should below the old ones as a child entry but not on the new?

No option to add these firewalls to this group?

[M.Allen]

Anyone?

[PavelK]

Hello @M.Allen

thanks for post!

Firewall can be member of only a single Device Group. Based on screen shots you provided your old Firewall has 2 vsys (virtual systems) each assigned to separate Device Group. If you want to replicate the same setting with new Firewalls, you will have to enable vsys function in Firewall, then create new vsys. After this you should be able assign each vsys to corresponding Device Group.

Kind Regards

Pavel