When moving or cloning policies
, you can assign a
(a virtual system on a firewall or a device group on Panorama) for which you have access permissions, including the Shared location.
To move a policy rule, select the rule in the
Move to other vsys
(firewalls only) or
to other device group
(Panorama only), specify the fields in the following table, and then click
To clone a policy rule, select the rule in the
Clone, specify the fields in the following table, and then click
Displays the Name and current Location (virtual system or device group) of the policy rules you selected for the operation.
Select the new location for the policy or object (a virtual system, device group, or Shared). The default value is the
that you selected in the
Select the rule position relative to other rules:
—The rule will precede all other rules.
—The rule will follow all other rules.
—In the adjacent drop-down, select the subsequent rule.
—In the adjacent drop-down, select the preceding rule.
Error out on first detected error in validation
Select this option (selected by default) to make the firewall or Panorama display the first error it finds and stop checking for more errors. For example, an error occurs if the
doesn’t include an object that is referenced in the policy rule you are moving. If you clear this selection, the firewall or Panorama will find all errors before displaying them.