Shared Security Policy Rules

[ce1028]

When you have multiple device groups, are you able to create shared security policies?  When I try to select shared and create a security policy rule, the zones are blank.

Only workaround I can seem to find is create a security policy in one device group and clone it to the others

[TomYoung · Accepted solution]

Hi @ce1028 ,

Great question!  I didn't realize zones were a limitation of the Shared device group.  The zones are populated by the devices or reference templates in the device group.  Since Shared is read only, it appears that you cannot save those fields.

What you can do is create a new device group, e.g. "Shared Rules", under Shared and make it the parent of the other device groups.  (You can have 4 device groups in a hierarchy).  You can add a reference template with zones to Shared Rules.  Then you can create share security policies for all of your firewalls in this one device group.

Thanks,

Tom

Hi @ce1028 ,

I have an update!  You can use Shared for common policy rules!  You can move a rule from another device group and the zones work fine.  Also, once you have imported the zones in a rule, they show up in the drop down for new rules.  You could also type the zone in manually without the dropdown.

Hope this helps,

Tom

[ce1028]

Thanks @TomYoung .  I did not realize it either until now.!