Managed Firewall Information
Select PanoramaManaged DevicesSummary to display the following information for each managed firewall.
Managed Firewall Information
Displays the name of the device group in which the firewall is a member. By default, this column is hidden, though you can display it by selecting the drop-down in any column header and selecting ColumnsDevice Group.
The page displays firewalls in clusters according to their device group. Each cluster has a header row that displays the device group name, the total number of assigned firewalls, the number of connected firewalls, and the device group path in the hierarchy. For example, Data center (2/4 Devices Connected): SharedEuropeData center would indicate that a device group named Data center has four member firewalls (two of which are connected) and is a child of a device group named Europe. You can collapse or expand any device group to hide or display its firewalls.
Displays the hostname or serial number of the firewall.
For the VM-Series NSX edition firewall, the firewall name appends the hostname of the ESXi host. For example, PA-VM: Host-NY5105
Lists the virtual systems available on a firewall that is in Multiple Virtual Systems mode.
Displays the firewall model.
Displays the tags defined for each firewall/virtual system.
Displays the serial number of the firewall.
Displays the operational mode of the firewall. Can be FIPS-CC or Normal.
Displays the IP address of the firewall/virtual system.
Create device specific variable definitions by copying them from a device in the template stack, or Edit existing variable definitions to create unique variables for the device. This column will be empty if the device is not associated with a template stack. By default, variables are inherited from the template stack. See Create or Edit Variable Definition on a Device.
Displays the template stack to which the firewall is assigned.
Device State—Indicates the state of the connection between Panorama and the firewall: Connected or Disconnected.
A VM-Series firewall can have two additional states:
HA Status—Indicates whether the firewall is:
Shared Policy—Indicates whether the policy and object configurations on the firewall are synchronized with Panorama.
Template—Indicates whether the network and device configurations on the firewall are synchronized with Panorama.
Certificate—Indicates the managed device’s client certificate status.
Last Commit State—Indicates whether the last commit failed or succeeded on the firewall.
Software Version | Apps and Threat | Antivirus | URL Filtering | GlobalProtect™ Client | WildFire
Displays the software and content versions that are currently installed on the firewall. For details, see Firewall Software and Content Updates.
On each firewall commit, PAN-OS automatically sends a firewall configuration backup to Panorama. Click Manage to view the available configuration backups and optionally load one. For details, see Firewall Backups.
Create Device Variable Definition
When a device is added to a template stack, the user has the option of creating device specific variables by copying existing overridden variables from a device in the same template stack, or override the template or template stack variables individually for the device.
When a device is first added to a template stack, you have the option to create device-specific variable definitions copied from devices in the template stack or you can edit the template variable definitions through PanoramaManaged DevicesSummary. By default, all variable definitions are inherited from the template stack and you can only override, and —not delete—the variable definitions for an individual device. You can use variables to replace IP address objects and IP address literals (IP Netmask, IP Range, FQDN) in all areas of the configuration, interfaces in the IKE Gateway configuration (Interface) and HA configuration (Group ID).
Create Device Variable Definition Information
Clone device variable definition from another device in the template stack?
|View the existing variable definitions and edit as needed. See Panorama > Templates > Template Variables.|
Select a device in the drop-down from which to clone variable definitions and then select the specific variable definitions you want to clone.
Panorama > Templates > Template Variables
Describes how to add a variable definition for a template or a template stack. ...
Configuration Reusability For Templates and Template Stacks
Enhanced template and template stack reusability using variables to reduce total template count while maintaining any unique configurations. ...
Configure a Template or Template Stack Variable
How to create a variable in a template or template stack and push it to firewalls and appliances. ...
Override a Template Stack Setting Using Variables
How to use variables to override a configuration setting pushed to the firewall from a template or template stack. ...
Override a Template Setting Using Template Stack Variables
How to use a template stack to override a configuration setting pushed to the firewall from a template. ...
Templates and Template Stacks
Overview of template and template stack configuration functionality. ...
Add a Template
Add a Template You must add at least one template before Panorama™ displays the Device and Network tabs required to define the network setup and ...
Panorama > Managed Devices > Summary
Panorama > Managed Devices > Summary A Palo Alto Networks firewall that Panorama manages is called a managed device . Panorama can manage firewalls running ...