Limit Shared Objects

[rob_moore]

I have 8 5060s that I manage with Panorama, I share objects between all of these devices.  I want to add a new pair of devices to Panorama that are completely separate from the other 8 and I don't want the shared objects to be on the new pair.  I also want to prevent admins of the new pair from creating shared objects that will become part of the original 8.  Is this possible?

Thanks

Rob

[mschuricht]

I believe he was referring to the fact the rules/objects that were pushed from Panorama are not editable on the device. This is the same model that was present prior to 5.0 and is not likely to change.

All local config can still be managed on a device.

[mikand]

Yeah thats what I meant, sorry for the confusion 🙂

[junaid.khan]

Ah I'was looking for the same. Hope this fixes our issue. However, I can't jump on 5.0 and upgrade our panorama cluster or the devices. We just moved from 4.0.11 to 4.1.7hfa2. I don't see 5.0 happening to us any time soon. I wish there was other alternative to this resolution other then manually converting shared objects to device group specific.

Thanks

Junaid

[jochristian · Accepted solution]

Hello,

We upgraded to Panorama 5.0 and that fixed our problem.

We are still running 4.1 on all the firewalls.

Jo Christian