query on shared object and shared group #######panorama######

[anil_y]

Hi,

>We are creating a shared obj and shared group in panorama and committing to only one specific device group at the end.

>will it cause any trouble later in future while doing commit all ?

>Is it okay to do like that or will we face any difficulties  in future?

[SutareMayur · Accepted solution]

@anil_y,

It shouldn't create any issues/difficulties in future. But if you're creating shared object or/group and pushing it on only specific device group, then device group policies for other managed gateways will show out-of-sync.

In future, if you make any changes to other out-of-sync managed gateways, then while pushing device group policy, shared objects or/groups will also get pushed to gateways along with the changes that you wanted to push.

Shared objects or/groups are normally created if you want to push all such objects on all Panorama managed gateways. So all such objects will get pushed on all gateways in one go.

If you want to push specific object on specific gateway, better you do not create is as shared one.

Hope it helps!

Mayur

[anil_y]

Thanks mayur,

Also I have observed on panorama that there is an option to uncheck in panorama settins which push shared obj or groups to only gateways where they are used. If we try to push to other gateways we are getting an snmp alert which was configured by some other kinda pa snmp box.

[SutareMayur · Accepted solution]

@anil_y,

Yes, the settings that you're talking about is to avoid sharing unused objects.  In other words, only required objects will be pushed to managed gateways.

And regarding SNMP alert, normally SNMP configuration is part of template which is separate configuration of each managed gateway. If possible, please share error snap to get more clarity.

Mayur