How to dissociated Local and Global rule

[Boya]

Hello, 

I want to know a way to dissociated global rule and local rule, in order to change local rule on a firewall to global rule on the panorama.

We think about tagging global rules and make an export of rules without this tag on the Panorama, but I want to know if there is an other way to do it.

Thank for your help

[PavelK]

Hello @Boya

I personally use different naming convention for all Panorama pushed configuration (policies, objects,...). The purpose of this is not only make it distinctive from local configuration, but also prevent an error when pushing the object with the same name as something configured locally. We are also using tags for all Panorama pushed policies.

I would leverage either different naming convention for all Panorama pushed configuration or tags you mentioned. Other than this can't think of any other way.

Kind Regards

Pavel

[Boya]

Hello,

Thank you for your return, after seaching a bit I was thinking about using a configuration convertor like Expedition, but I don't if it show if rules are implement on Panorama, or on each firewall.

Regards,

Yacine