Hi Folks,
We had recently migrated HA firewall to Panorama using the below documentation
Migrate a Firewall HA Pair to Panorama Management:
https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management.html
As per below documentation once the migration had been completed the HA settings and management IP address of the HA firewall need to be managed locally on the firewall by over-riding the template values.
Also both the HA firewalls are in same template group which indicates that we will not be able to manage the firewall.
But the customer is not OK with it and need to manage HA settings and everything from Panorama itself.
We are thinking about creating an common template containing all the required changes for both the firewalls and create two template stack for each firewall and call the template in those template stacks.
Then create two separate template dedicated for HA Settings, Management IP address configuration and other things which will be different from both the firewalls and map primary firewall HA temp config to Primary firewall stack and do the same for Secondary firewall temp and map it to secondary firewall also.
Please let me know if this approach is correct.
Temp 1 == all common settings, temp 2= Primary HA Settings, Temp 3 = Sec HA Settings\\\ Temp stack 1(Primary FW)== temp1, temp 2. \\\temp stack 2(Secondary FW) = temp1, temp 3
Thanks in advance
... View more
