Policy Management - Manage Group Policy (through Panorama)
This activity defines best practices for Panorama security policy management. Considerations include migrating local security policy to Panorama (i.e., Panorama installed after some firewalls already deployed), grouping of security appliances, VSYS, managing of device groups, order/precedence of rules, etc.
Panorama provides a centralized repository to efficiently create, manage, and push security policies to firewalls in small and large-scale deployments. This becomes essential to keep a consistent rulebase through a geographically dispersed network.
The attached document contains details of the components of a security policy and virtual systems, explains how security policies operate within device groups and virtual systems, and how to best manage security policies through Panorama.