When you have homogeneous configurations across a large
number of firewalls that exceed the management capacity of a single
Panorama instance, or if you have deployed multiple Panorama™ management
servers, you can use the Interconnect plugin on Panorama to reduce
the operational burden. The Interconnect plugin allows you to set
up a Panorama Controller that manages up to 64 Panorama Nodes, so
that you can streamline common configuration and policies across
Panorama appliances and the managed firewalls on your network. For
example, you can set up the Panorama Controller as the central point
for managing both the Panorama specific configuration such as admin
roles on the Panorama Nodes, and all the common template stack and
device group configurations that you push to the Panorama Nodes
for managing all the firewalls. The following figure illustrates
the Panorama Interconnect hierarchy, where the Panorama Controller
manages multiple Panorama Nodes, which in turn manage multiple devices.
The following figure displays an example of a Panorama Interconnect Setup page for
a Panorama Controller and a Panorama Node once they have been successfully configured.
The following tasks must be completed to set up the Panorama
Interconnect plugin:
Download, install, and set up the Panorama Interconnect
plugin on the Panorama Controller and Panorama Nodes.
Prepare the Panorama Controller to Push Configuration
to the Managed Firewalls
On the Panorama Controller, add a device group and configure a template stack to configure
policy rules, objects, and settings to enable the firewalls to operate
on the network.
Push the Panorama-specific configuration,
as well as the template stack and device group configurations, from
the Panorama Controller to the Panorama Nodes.