Nested Device Group in Panorama

[Sujanya]

How to create nested device group in panorama, is the same device group can be part of multiple nested device group.

If yes, how the policy priorities would be.

Please suggest here.

[PavelK]

Hello @Sujanya

thanks for the post!

You can configure nested device group in the tree of up to 4 device group levels. The policies, objects,... are inhereted from upper device group in the hierarchy. Further details are in documentation: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/panorama-overview/centralized-firewal...

Kind Regards

Pavel

[Sujanya]

Hi Pavel,

Thanks for the information. We do have single device group which needs to be part of two separate device group( which is for different purposes). What we heard is while creating the device group in Panorama , we can call the same device group by bifurcating via vsys. Please let us know if you have any suggestion on the same or any documentation which can help us in implementing it in our network.

[PavelK · Accepted solution]

Thank you for reply @Sujanya

unfortunately, I never came across what you are referring to and have not found anything related in documentation. I do not see such option while creating a device group. A firewall as well as vsys can be assigned to only one device group: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/manage-device-groups...

Kind Regards

Pavel

[Sujanya]

Hi @PavelK ,

Thanks for the details. This solved my queries.