Panorama On Boarding

[chens]

Hi.

For the last 10 years, i am in charge of 3 PA devices.

Device #1 (HA Pair of 1410) in the main site.

Device #2 (460) in the DR site.

Device #3 (440) in 2nd DR site.

I have recently purchased Panorama to make it easier to deploy some shared policies and objects (right now I am doing this manually on each).

I have already registered the devices, which are log forwarding to the Panorama.

I have been trying for 5 weeks without success to start the main mission which is the policy deployments.

i did the import from devices, but I have a total mess and the push is not working (a lot of errors regarding profile groups).

I also heard the I will need to clear all devices in order to let Panorama to push them the policy (which will lead to downtime),

Ideas? Help plz...

[chens]

Hi

thanks a lot!

But if the local HA config will stay, why do i need to struggle with variables....?

My goal is to be as simple as possible. Manage the HA config LOCALY on the firewalls. 

What do you suggest?

[TomYoung]

Hi @chens ,

That sounds good!  Use option 1 and manage HA locally.

Thanks,

Tom