Panorama and single device policy

[dschuemann]

What is everyone doing to manage FW policies that only apply to a single device? My thought was to create device groups for those one off devices.

[gbogojevic]

Yes, you can create device group for this single device.

[torm]

You could also use the "target" option in the security policy in Panorama. Then you can select to push specific policies to specific devices within a device group.

[pulukas]

With single devices I would create a group just for the device policy in Panorama.  This keeps all the options for policy centralized.

but if you have a lot of them and don't like the method of selection for management.  You could put all these devices into a single group and then have no policies at all applied by Panorama for the group.  Rather select the specific devices on the far left menu and manage them as local policies.