Certificate profile is not able to call when shared location is enabled in panorama

[AkashThangavel]

Hi Techies,

When shared location is enabled, I am not able to call the certificate profile in the EDL. Kindly give me the reason behind this. Because I need to use this EDL for all the location firewalls, so I don't want to do this EDL hosting service for multiple times

 

regards,

Akash Thangavel

Network Security Engineer

[aleksandar.astardzhiev]

Hi @AkashThangavel ,

The checkbox for "shared" doesn't mean this object is shared between all template/template-stacks in Panorama.

Checkbox for Shared means this config will be applied in the root/shared VSYS if your firewall is configured with multi-vsys

Sharing certificate between different template can be tricky because there is no direction relation between templates. What you can do is:

1. Create one template in which you define some global settings that should be applied to all managed FWs, like imported certificates

2. Create template-stack that add the global settings template and the template with the rest of each FW

[AkashThangavel · Accepted solution]

Thanks for the reply, Mr Aleksandar.Astardzhiev. From your input, I have made it possible.

In the common device group, the certificate profile is not showing

In the common device group call the common template as a reference template

In a common template create the certificate and certificate profile

Now in the common device group, the certificate profile will list, you can use it for all the device groups of the hierarchy.

regards,

Akash Thangavel

Network Security Engineer