Any special considerations when importing HA firewall configurations into Panorama?

Any special considerations when importing HA firewall configurations into Panorama?

22590
Created On 09/25/18 18:47 PM - Last Modified 06/13/23 05:19 AM


Symptom


Are there any special considerations when importing the firewall configurations from an HA pair into Panorama?



Resolution


Yes, there are many considerations  that you need to be aware of.

 

By default, Panorama will create a new device group and a new template when the first firewall's configuration is imported.

When importing the second firewall's configuration, it too will require its own template, but it can be associated with the same device group as the first firewall.

 

SPECIAL NOTE

The High-Availability configuration is part of the template and if both firewalls are associated with the same template, then they will both have the same HA configuration and in turn both members will try to become active when turned on. Be sure to double check the templates to avoid this happening.

 

For guidance on how to import a firewall's configuration into Panorama, please reference: 

How to Perform a Device Config Import into Panorama



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQmCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language