How to redistribute data (e.g. ip-user mappings, device quarantine list, ip tags, etc) from a multivsys firewall over management interface

How to redistribute data (e.g. ip-user mappings, device quarantine list, ip tags, etc) from a multivsys firewall over the management interface 

PAN-OS Firewall enabled with Multivsys

Panorama

Data Redistribution 

When User-ID is enabled on a firewall's management interface and the firewall is configured as the Agent under Data Redistribution on a client Panorama or firewall without a Collector Name on vsys, the client Panorama or firewall connects to vsys1 by default and receives data only from vsys1.

Example Scenario

• Firewall-A is enabled with User-ID on the management interface profile and is listening on TCP 5007
• The firewall is configured as an Agent under the Data Redistribution on the Panorama (or Firewall-B)
• Collector Name under Data Distribution > Collector Setting is not configured on any vsys
• Firewall-A has two vsys
  • vsys1 has Device Quarantine List with two entries 
  • vsys2 has Device Quarantine List with three entries
• Conclusion: The Panorama/Firewall-B (as a Client) will connect to the Firewall-A agent (server) only on the vsys1. Data on vsys1 will redistribute the two device quarantine entries to the Panorama/Firewall-B from the Firewall-A. Data from other vsys (e.g. vsys2) will not be redistributed to the Panorama/Firewall-B from the Firewall-A

Multivsys Data Redistribution Objective: To redistribute data from both the vsys1 and vsys2 to the Panorama/Firewall-B, the Firewall-A and Panorama/Firewall-B should be configured with Collector Name under the Data Distribution > Collector Setting:

• On Firewall-A's vsys1 configure the Collector Name (e.g. Vsys1-Collector_FWA)
• On Firewall-A's vsys2 configure the Collector Name (e.g. Vsys2-Collector_FWA)
• On Panorama/Firewall-B, configure two Agents for each vsys under Data Distribution:
  • Name: Vsys1-Agent, add Firewall-A Host IP and Port 5007 and Collector Name (e.g. Vsys1-Collector_FWA)
  • Name: Vsys2-Agent, add Firewall-A Host IP and Port 5007 and Collector Name (e.g. Vsys2-Collector_FWA)
• Conclusion: With this configuration, the Panorama/Firewall-B client will connect to Firewall-A on vsys1 and vsys2 and receive redistributed data from both vsys1 and vsys2 

Please check the KB: How to Configure and Verify User-ID Collector in PAN-OS