When identical objects exist in both the Shared and Device Group hierarchies, which object takes precedence?

When identical objects exist in both the Shared and Device Group hierarchies, which object takes precedence?

46996
Created On 09/26/18 13:51 PM - Last Modified 04/08/26 20:06 PM


Question


  • Objects can be created in Panorama under "shared" and "Device groups".
  • The objects created under both these groups can have a same name.
  • In such conditions when the Panorama push is made which objects are pushed to the Firewall?

Environment


  • Panorama
  • Firewall
  • Supported PAN-OS

Answer


  1. When objects with same name are pushed from Panorama to firewall, the one in the "device group" is pushed to the Firewall.
  2. This default precedence can be changed so that the shared objects are pushed by using the following setting.
    • Panorama > Setup > Management > Panorama Settings- 'Objects defined in ancestors will take higher precedence'
    • The “Objects defined in ancestors will take higher precedence” option is disabled by default.

     
    Other users also viewed:
    Actions
    • Print
    • Copy Link

      https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClvoCAC&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

    Choose Language