Panorama on multiple networks?

[BDS_Vince]

We're in the process of implementing an MPLS network.

One of the things we'd like to do is leverage the network to manage the firewall devices with Panorama.  The desired configuration would allow us to send firewall to a new location, connect the management port to the MPLS switch and use the console cable to set the management port IP address to an address on the MPLS network.  We then connect, assign the panorama IP address to the firewall and can push the config from Panorama.

Unfortunately the entire network has not been built and we have some sites that are only reachable over an IPSEC VPN between the branch and corporate.

Is it possible to multi-home Panorama so it can service firewalls on more than one network?

Is there an article I missed?

Thank you!

Vince

[pulukas]

Pretty sure that Panorama can only have one interface.

But as long as you have routing setup so that the mgmt address of the firewall over the IPSEC tunnel is reachable from the Panorama address, you should be able to connect to the device and manage it.

Is your MPLS a completely isolated network that you are not permitted to route out of?

[reaper]

if your management interface is not able to reach panorama because it needs to be out of band until the MPLS setup is completed, you can temporarily (or permanently) use service routes to have a dataplane interface be used as source interface for panorama connections