About Yevgeny_Libov

Thank you! ... View more

Works like charm. Thanks Tom. ... View more

Hi Tom,   Yes, you are right. I continued researching this and editing my reply, and between my edits you made this comment. Thank you for correcting me while I was making my mind 🙂 I will follow up the steps and add the HA to Panorama at the beginning of next week and will report on results. ... View more

Hi Tom, many thanks.   I've followed the manual before and an additional manual for adding the HA pair, but haven't followed in the correct order. I will try to follow this one step by step (and take what is necessary from the one which instructs how to use variables). I would like to know your opinion on how to manage network settings from Panorama for an HA pair (Active-Passive). I didn't find it in your answer or the guide. Under STEP 7, section 6: "Select the template stack for the first firewall, add the second firewall, select OK and Commit to Panorama to add it to the same template stack as the HA peer." This step adds both device templates under the same template stack. However, how do I manage the network settings? When I was experimenting with this, when in Panorama I attempted to change network settings under template stack, I have had limited edit options, or it was in a Read Only state. I had to select the FW template in order to have full edit capability, so here I wander: Should I edit each device template separately? This doesn't make sense and I'm probably missing something. About managing the HA from Device Groups when both FW are associated under the the device groups, this works well. Edit: I think I partly understand what I've been missing: "Select the template stack for the first firewall, add the second firewall, select OK and Commit to Panorama to add it to the same template stack as the HA peer." I want to understand please: The end result of this is a single template stack with both devices added, and a single template assigned to it, which belongs to one of the devices, right? ... View more