Security rules on middle level DGs

[Miroslaw_Iwanowski]

I have three templates in a stack and three levels of device groups. I want to create a leveled policies based on security zones. Let's say I have a secuity zone called GlobalProtect.

Let's say I have:

DG-Standard

|-------DG-Management

            |-------------DG-ISOC

I want to create GlobalProtect rules on level 2 of device groups. The problem is that all security groups are visible only if I select the the DG-ISOC device group so I cannot put any policy on DG-Management or DG-Standard level. 

Is there a way to make 'common' rules based on security zones?

[Remo · Accepted solution]

Hi @Miroslaw_Iwanowski

What do you mean with "security groups"? Zones, right? If yes, then try to write the zone name in level 2 device group manually. I think this os only a reference check problem in panorama.

[Miroslaw_Iwanowski]

Ahhh, I haven't though about that! Thank you.