03-10-2020 11:19 AM
So - Panorama does NOT fully support Shared-Gateways. You can import/create the shared gateway, assign it to Interfaces, but you cannot manage the NAT policy or the Forwarding policy.
There is a feature request already --- FR ID:4412
Additionally (maybe a bug), while attempting to import the policy into Panorama, I ran into an issue with named objects used as NAT translations. These had to be changed to IP addresses on the local firewall, then re-imported before a commit to Panorama would work. And yes, they were imported into shared.
Also .... The shared-gateway NAT policy gets imported into the Panorama XML config. It can even be found by Global Search. Clicking on the names does nothing since there is no user interface to manage them.
