Panorama Interconnect

Manage large-scale firewall deployments using the Panorama™ Interconnect plugin.
The Panorama™ Interconnect plugin enables you to establish a Panorama Controller that manages Panorama Nodes and centralizes configuration management for consistent firewall configurations and policies across large-scale firewall deployments. This also helps reduce the time you spend synchronizing configurations on multiple Panorama management servers and improves the response time for security vulnerabilities in the event of a misconfiguration.
For more information, see Manage Large-Scale Firewall Deployments.
  1. Set Up Panorama management servers that shall function as the Controller and Nodes.
  2. Install the Panorama Interconnect plugin. You must install the plugin on the Panorama Controller and all Panorama Nodes.
    1. Select
      Panorama
      Plugins
      and search for
      Interconnect
      .
    2. Download
      and
      Install
      the Panorama Interconnect plugin.
    3. Click
      Commit
      Commit to Panorama
      to finish installing the Panorama Interconnect plugin.
    1. Obtain the certificate authority (CA) certificate for the Panorama Controller.
    2. Generate the Panorama Node certificate.
    3. Create a certificate profile for authenticating the Panorama Nodes.
    1. Set up the Panorama Controller. Repeat this step on the high availability (HA) peer if the Panorama Controller is in an HA configuration.
      After you configure the Panorama management server as the Panorama Controller, you cannot reconfigure that Controller as a Panorama Node. Verify that you are configuring the correct Panorama management server as the Panorama Controller before you continue to the next step.
      panorama-interconnect-controller-config.png
    2. Set up the Panorama Node. Repeat this step for all Panorama Nodes.
      panorama-interconnect-client-config.png
    3. Add the Panorama Nodes to the Panorama Controller.
      panorama-interconnect-add-panorama-client.png
  3. Add a Device Group on the Panorama Controller.
  4. Configure a Template Stack on the Panorama Controller.
  5. Add one or more firewalls to be managed by a Panorama Node.

Related Documentation