Panorama - policies and device groups

[abarnett]

Hi All,

Does anyone know if there is a way to share policies between device groups in Panorama?  I have several HA pairs of firewalls and would like to use the device group functionality for administering each pair, and would prefer not having to create the same policies for every group.

thank you!

Andrew

[pantac]

when you are configuring the policies on panorama you will see a colum for target. This is which devices will be pushed that specific rule. you can use this function to push the policies to x number of devices thus you would not have to create a rule for each group of devices.

[abarnett]

Thanks for your reply!

When I click on Target, the only devices displayed are the firewalls within the device group context that I've selected.

What I would like to do is share policies across multiple device groups.

The reason why is that I've created a set of base policies that apply to each campus, and it would be helpful if I didn't have to recreate them for each device group.  As a work around I've been exporting the XML, copying the list of policies from one device group, pasting them into the others then importing that file back into panorama.

thanks again,

Andrew