To use Panorama for central management of firewalls, the first step is to add them as managed devices. Before starting, collect the firewall serial numbers and prepare each firewall as follows:
Perform initial configuration on the firewall so that it is accessible and can communicate with Panorama over the network. Add the Panorama IP address(es) (one server or two, if Panorama is configured in a high availability pair) in the Panorama Settings section of the Device > Setup> Management tab and commit the changes. Set up the data interfaces. For each interface you plan to use, select the interface type and attach it to a security zone so that you can push configuration and policy from Panorama.
You can then add the firewalls as managed devices on Panorama.
When you add a firewall as a managed device, it uses an SSL connection with AES-256 encryption to register with Panorama. Panorama and the firewall authenticate each other using 2,048-bit certificates and use the SSL connection for configuration management and log collection.
Add a Firewall as a Managed Device
Add the firewall to Panorama. Select Panorama > Managed Devices and click Add. Enter the serial number for each firewall (one entry per line) that you want to manage centrally using Panorama, and then click OK. The Managed Devices page displays the new firewall. ( Optional ) Add a Tag. Tags make it easier for you to find a firewall from a large list; they help you to dynamically filter and refine the list of firewalls that display. For example, if you add a tag called branch office, you can filter for all branch office firewalls across your network. Select the check box beside the firewall and click Tag. Click Add, enter a string of up to 31 characters (no empty spaces), and click OK. Click Commit, for the Commit Type select Panorama, and click Commit again.
Verify that the firewall is connected to Panorama. In the Panorama > Managed Devices page, the Device State column displays whether the firewall is connected or disconnected to Panorama.

Related Documentation