Content and anti virus version below panorama policy need a quick solution

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content and anti virus version below panorama policy need a quick solution

L0 Member

Hello,

           Bootstrap is working on palo alto VMs installed in AWS. The FWs are pointing towards Panorama for everything (config, packages,etc) and do not have internet access. The issue we are running into is that our policy in Panorama for these Firewalls require them to be at a certain level for content and anti virus to be able to allowed to download device group profile and templates. We are using user data method for bootstraping the firewalls.

 

Since content and anti virus version currently installed on these FWs is below what the policy requires them to be at for them to me managed by panorama. I am thinking the easiest way would be to clone the exiting pollicy in panorama and remove the content and anti virus requirement so that the FWs can be managed by panorama temporarily. Download the content and anti virus to the panorama and Then push the correct version of content and anti virus to the FWs and once they have the right version of contant and anti virus. Change the bootstrap to point to the correct device groups and templates that reference to the policy that requires the FM to be at a specific version.

 

Any ideas? I do not want to use the S3 bucket method and we can not really remove the requirement of the FWs to be not having the latest content and anti virus to be managed by panorama.

Please assist.

Thanks,Tom

0 REPLIES 0
  • 166 Views
  • 0 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!