Adding new devices to Panorama

[Amin2]

Hi

I need to add new pair of devices (PA 3220) as HA active/passive mode which will be replacing the existing PA 3060 HA cluster which is in production.  I am going to use the same device group, but I would like to rename the template and utilize the same parameters as the original.  I was thinking about cloning the template and pushing that to the new devices or should just add them to the existing template stack and then rename the template?  Not sure what the best approach is.

[PavelK · Accepted solution]

Thank you for the post @Amin2

Both options will work, but given condition that new PA-3220 is going to replace existing PA-3060 utilizing the same Template configuration, placing PA-3220 into the same Template Stack and renaming Template seems less work/less error prone and better option to me.

Kind Regards

Pavel

[AravinndR]

Hi, I am adding my new device PA-5420 to the existing device group that manages the 5600 Series Firewall (Multiple Vsys and VR's) in production. While attempting to push the template, it fails(attached error FYR). However, when I manually configure the interfaces, zones, and virtual routers on the new firewall, the commit is successful. Is this manual configuration necessary? I am creating interface names, IP addresses, zones, and all routing details manually.