Management of a multi-VSYS firewall from Panorama

[AlexandroDelAngel]

Hello friends,

I have been tasked to deploy a multi-VSYS PA and to manage it from Panorama, honestly this is the first time that I do this so I'm reaching out to you in order to guide me in the most siple way to achieve this. The way I'm planning this is:

1. Enable multi-VSYS funcionality (I guess that by default VSYS1 should be created automatically).

2. Setup the HA pair.

3. Setup communication to Panorama, this will be a site to site VPN so I will have to do this in the VSYS1.

Now in Panorama:

1. Register the Serial Numbers in Managed Devices.

2. Create a new Template.

3. Create a new Stack (including the new one, and another that we use for Standard parameters).

I guess that this step above is the most critical one, I'm with the idea that we should be able to manage the 4 VSYS from this single template, but please correct me if I'm wrong.

4. Then, in Panorama implement the required config, create the 3 new VSYS, etc. and push the config to the device.

5. Then, per my understanding at this point I should be able to see the Virtual Systems as available devices in the Device Groups section.

This step above is also a critical one, as I'm with the idea that I should create a single Device Group for each VSYS and in order to achieve that, I should be able to see the Virtual Systems as available devices in Device Groups section? Please correct me if I'm wrong.

Any feedback will be appreciated.

Kind Regards,

[BatD]

@AlexandroDelAngel All of your assumptions seem correct...