Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
Panorama
Panorama Administrator's Guide
Manage Firewalls
Manage Device Groups
Push a Policy Rule to a Subset of Firewalls
Document:
Panorama Administrator's Guide
Push a Policy Rule to a Subset of Firewalls
Download PDF
Last Updated:
Mon Mar 14 15:52:55 PDT 2022
Current Version:
9.0 (EoL)
Version 10.2
Version 10.1
Version 10.0
Version 9.1
Version 9.0 (EoL)
Version 8.1 (EoL)
Version 8.0 (EoL)
Version 7.1 (EoL)
Table of Contents
Search the Table of Contents
Panorama Overview
About Panorama
Panorama Models
Centralized Firewall Configuration and Update Management
Context Switch—Firewall or Panorama
Templates and Template Stacks
Device Groups
Device Group Hierarchy
Device Group Policies
Device Group Objects
Centralized Logging and Reporting
Managed Collectors and Collector Groups
Local and Distributed Log Collection
Caveats for a Collector Group with Multiple Log Collectors
Log Forwarding Options
Centralized Reporting
User-ID Redistribution Using Panorama
Role-Based Access Control
Administrative Roles
Authentication Profiles and Sequences
Access Domains
Administrative Authentication
Panorama Commit, Validation, and Preview Operations
Plan Your Panorama Deployment
Deploy Panorama: Task Overview
Set Up Panorama
Determine Panorama Log Storage Requirements
Manage Large-Scale Firewall Deployments
Determine the Optimal Large-Scale Firewall Deployment Solution
Increased Device Management Capacity for M-600 and Panorama Virtual Appliance
Increased Device Management Capacity Requirements
Deploy Panorama for Increased Device Management
Install Panorama for Increased Device Management Capacity
Upgrade Panorama for Increased Device Management Capacity
Set Up the Panorama Virtual Appliance
Setup Prerequisites for the Panorama Virtual Appliance
Install the Panorama Virtual Appliance
Install Panorama on VMware
Install Panorama on an ESXi Server
Install Panorama on vCloud Air
Support for VMware Tools on the Panorama Virtual Appliance
Install Panorama on AWS
Install Panorama on AWS GovCloud
Install Panorama on Azure
Install Panorama on Google Cloud Platform
Install Panorama on KVM
Install Panorama on Hyper-V
Perform Initial Configuration of the Panorama Virtual Appliance
Set Up The Panorama Virtual Appliance as a Log Collector
Set Up the Panorama Virtual Appliance with Local Log Collector
Set up a Panorama Virtual Appliance in Panorama Mode
Set up a Panorama Virtual Appliance in Management Only Mode
Expand Log Storage Capacity on the Panorama Virtual Appliance
Preserve Existing Logs When Adding Storage on Panorama Virtual Appliance in Legacy Mode
Add a Virtual Disk to Panorama on an ESXi Server
Add a Virtual Disk to Panorama on vCloud Air
Add a Virtual Disk to Panorama on AWS
Add a Virtual Disk to Panorama on Azure
Add a Virtual Disk to Panorama on Google Cloud Platform
Add a Virtual Disk to Panorama on KVM
Add a Virtual Disk to Panorama on Hyper-V
Mount the Panorama ESXi Server to an NFS Datastore
Increase CPUs and Memory on the Panorama Virtual Appliance
Increase CPUs and Memory for Panorama on an ESXi Server
Increase CPUs and Memory for Panorama on vCloud Air
Increase CPUs and Memory for Panorama on AWS
Increase CPUs and Memory for Panorama on Azure
Increase CPUs and Memory for Panorama on Google Cloud Platform
Increase CPUs and Memory for Panorama on KVM
Increase CPUs and Memory for Panorama on Hyper-V
Complete the Panorama Virtual Appliance Setup
Convert Your Panorama Virtual Appliance
Convert Your Evaluation Panorama to a Production Panorama with Local Log Collector
Convert Your Evaluation Panorama to a Production Panorama without Local Log Collection
Convert Your Evaluation Panorama to VM-Flex Licensing with Local Log collector
Convert Your Evaluation Panorama to VM-Flex Licensing without Local Log Collector
Convert Your Production Panorama to an ELA Panorama
Set Up the M-Series Appliance
M-Series Appliance Interfaces
Perform Initial Configuration of the M-Series Appliance
M-Series Setup Overview
Set Up an M-Series Appliance in Management Only Mode
Set Up an M-Series Appliance in Panorama Mode
Set Up an M-Series Appliance in Log Collector Mode
Set Up the M-Series Appliance as a Log Collector
Increase Storage on the M-Series Appliance
Add Additional Drives to an M-Series Appliance
Upgrade Drives on an M-Series Appliances
Configure Panorama to Use Multiple Interfaces
Multiple Interfaces for Network Segmentation Example
Configure Panorama for Network Segmentation
Register Panorama and Install Licenses
Register Panorama
Activate a Panorama Support License
Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is Internet-connected
Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is not Internet-connected
Activate/Retrieve a Firewall Management License on the M-Series Appliance
Install Content and Software Updates for Panorama
Panorama, Log Collector, Firewall, and WildFire Version Compatibility
Install Updates for Panorama in an HA Configuration
Install Updates for Panorama with an Internet Connection
Install Updates for Panorama When Not Internet-Connected
Migrate Panorama Logs to the New Log Format
Transition to a Different Panorama Model
Migrate from a Panorama Virtual Appliance to an M-Series Appliance
Migrate a Panorama Virtual Appliance to a Different Hypervisor
Migrate from an M-Series Appliance to a Panorama Virtual Appliance
Migrate from an M-100 Appliance to an M-500 Appliance
Access and Navigate Panorama Management Interfaces
Log in to the Panorama Web Interface
Navigate the Panorama Web Interface
Log in to the Panorama CLI
Set Up Administrative Access to Panorama
Configure an Admin Role Profile
Configure an Access Domain
Configure Administrative Accounts and Authentication
Configure a Panorama Administrator Account
Configure Local or External Authentication for Panorama Administrators
Configure a Panorama Administrator with Certificate-Based Authentication for the Web Interface
Configure an Administrator with SSH Key-Based Authentication for the CLI
Configure RADIUS Authentication for Panorama Administrators
Configure TACACS+ Authentication for Panorama Administrators
Configure SAML Authentication for Panorama Administrators
Set Up Authentication Using Custom Certificates
How Are SSL/TLS Connections Mutually Authenticated?
Configure Authentication Using Custom Certificates on Panorama
Configure Authentication Using Custom Certificates on Managed Devices
Add New Client Devices
Change Certificates
Change a Server Certificate
Change a Client Certificate
Change a Root or Intermediate CA Certificate
Manage Firewalls
Add a Firewall as a Managed Device
Manage Device Groups
Add a Device Group
Create a Device Group Hierarchy
Create Objects for Use in Shared or Device Group Policy
Revert to Inherited Object Values
Manage Unused Shared Objects
Manage Precedence of Inherited Objects
Move or Clone a Policy Rule or Object to a Different Device Group
Select a URL Filtering Vendor on Panorama
Must Panorama and Firewalls Have Matching URL Filtering Vendors?
Change the URL Filtering Vendor on HA Panorama
Change the URL Filtering Vendor on non-HA Panorama
Migrate Panorama and HA Firewalls from BrightCloud to PAN-DB
