Panorama doubts.

[Welligton]

It is possible to edit a rule placed on the firewall through the panorama, because I can not edit rules coming panorama, directly on the firewall.

[bat]

I don't think you can. You will have to change it through Panorama

[Welligton]

If my Panorama fails, and you need to change a rule created through the device group panorama, not is there any way for me to change a rule that was created in the panorama, and passed to firewall

[bat · Accepted solution]

If Panorama fails, then you can disable Panorama Policy and Objects Under Device > Setup > Panorama.

While disabling you get the option to locally save the Policies and Objects (Same for Device and Network Template) which then you can edit later.

Please do mark helpful/correct answers.

[Welligton]

Bat,

Thanks. :smileygrin:

[htnahisn]

Wanted to know if i will need a panaroma for a single firewall.I am trying to replace 6 firewalls by 2 (cluster).Wanted to know if i can go with the Panorama on the virtual machine.But still in doubt if it would be of any use.But thinking of the future if we expand.Your thoughts on this would help.

[pulukas]

Panorama is designed to be a central management for multiple firewalls.   Panorama can run as an appliance or as a virtual machine.  You purchase the method you prefer for your network.

With a single cluster the only real advantage you would get from Panorama is a greatly increased log capacity.  So you would be able to run Palo Alto native reports on a longer back period of data.