Panorama - Template objects not shared by firewall cluster

[alemonnier]

I added an existing firewall Active/Active Cluster with multiple Vsys into Panorama

Before the integration, some Device objects like "certificates" or "Local user database" were shared by the firewalls member of the cluster.

Now I need to create the objects twice times in each template of the firewalls. 

Is it possible to manage it like before and the object only one time?

Regards

[PavelK · Accepted solution]

Thank you for the post @alemonnier

Yes, it is possible, but you might have to re-design your Template design. I would create 2 Template Stacks for each Firewall, then put on top of each Template Stack a Template with configuration for each Firewall. Template with configuration that is going to be shared by both Firewalls would be placed on the bottom of Template Stack.

Below is a sample:

Template stack 1
  Template with Firewall 1 specific configuration

  Template with general configuration

Template stack 2
  Template with Firewall 2 specific configuration

  Template with general configuration

After Templates/Template Stacks are created, assign each Firewall to own Template Stack. Each time you want to make configuration change for both Firewalls do the change in Template: "Template with general configuration". This will be inherited by all Templates in Template Stack.

Kind Regards

Pavel 

[alemonnier]

Hello @PavelK 
Thanks for your answer.

I had this idea too but I was hoping that there was another solution 😅

Regards

Anthony