Panorama policies pushed to HA peer

[emelcher]

I've got an HA A/P pair where the primary is included in a device group and managed via Panorama.  The configs are sycnhed and everything is matched; however, the peer has no inherited policy from Panorama.  Any ideas?

[sdurga · Accepted solution]

You have to connect your HA peer also to the panorama and push policies to both of your peers from the panorama.

- Sandeep T

[emelcher]

Sandeep, thanks!  I tried this several times.  Added it to the device group and pushed to the device only not the entire device group.  Would this matter?

Would something in the HA config prevent the backup from getting policy from Pano for some reason?

[kfindlen]

Hi Erich,

Panorama pushed policies are not synchronized by HA between the peers.  You will need to put both devices in the same device group in Panorama and then always push policies to the device group, or manually push the same policies to both devices of the HA pair.

Thanks,

-- Kevin

[emelcher]

Thanks!  I got it working.