Add a Firewall to a Panorama Node

Perform initial configuration on the firewall so that it is accessible and can communicate with Panorama over the network.
Log in to the Panorama web interface of the Panorama Controller.
Select
Panorama
Interconnect
Devices
and
Add
the firewall.
Enter the firewall information:
Enter the
Serial No
of the firewall.
Select the
Panorama
Node to manage the firewall.
Select the
Template Stack
with which to manage the firewall configuration.
Select the
Device Group
with which to associate the firewall.
Click
OK
to add the firewall as a managed device.
Click
Commit
and
Commit to Panorama
to finish adding the firewall.
Select
Panorama
Interconnect
Panorama Nodes
and
Synchronize Config
.
(
Required for firewalls running PAN-OS 10.1 and later releases
) Obtain the device registration authentication key required for onboarding new firewalls.
Select
Panorama
Interconnect
Panorama Nodes
and locate the Panorama Node you added firewalls to.
Click the value in the Auth Keys column to display the device registration authentication key.
The device registration authentication key is automatically generated for the Panorama Node.
Copy the Auth Key.
Configure the firewall to communicate with the Panorama Node.
Log in to the firewall web interface.
Select
Device
Setup
Management
and edit the Panorama Settings.
Enter the Panorama Node IP address in the first field
(
Optional
) If the Panorama Node is in an HA configuration, enter the IP address of the secondary Panorama Node in the second field.
Enter the device registration
Auth Key
you copied in the previous step.
Click
OK
.
Select
Commit
and
Commit
your changes.
Verify that the newly added firewall is
Connected
.
Select

Panorama

Interconnect

Devices

.

Find the firewall you added and verify that the Connection Status column displays

Connected

.
(
HA only
) Copy the managed firewalls added to the primary Panorama Node to the secondary Panorama Node.
This step is required to successfully push the Panorama Node configuration to managed firewalls for a Panorama Node in an HA configuration.
Select
Panorama
Interconnect
Panorama Nodes
and select the primary Panorama Node you added managed firewalls to.
Select
Copy Devices
.
Click
OK
when prompted to copy the managed firewalls from the primary Panorama Node to the secondary Panorama node.
Push the Panorama Node Configuration to Managed Firewalls.