MasterDevice Configuration

[Y.Narita347153]

Hello PaloAlto engineer Team,

I'm trying to configure the MasterDevice.

Setting the MasterDevice to CIE doesn't mean the MasterDevice settings will be applied to Prisma Access or all devices in the device group, right?

I understand that the MasterDevice just lets me know which device group the username will appear in the security policy.

https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-user-based-policy/retri...

Regards,

[nikoolayy1]

Hey @Y.Narita347153  just a note this is the open tech forum for Palo Alto for users like you and me 🙂

Outside of that Prisma Access when managed through Panorama and not the Stata Cloud Manager SAAS portal auto creates in panorama a device group and template during the integration as shown in Retrieve User-ID Group Mappings for Prisma Access

You just need to select the autogenerated device group. Hope this explains your question.

[Y.Narita347153]

Hello nikoolayy1,

Panorama already has device groups and templates.

I understand that by selecting a master device from Shared, I can display user information in the target device group and template.

This does not mean that the master device settings will be loaded into the device group and template, right?

Regards,

[nikoolayy1]

Templates defenetly it will not but security configuration policies and rules is another thing see Master Device 

Better plan your security first on the master device and also see Retrieve User-ID Group Mappings for Prisma Access as CIA can be used without a master device is an option.