Folders are used to logically group your firewalls or deployment types (
Prisma Access
mobile users, remote networks, or service connections) for simplified
configuration management. You can create a folder that contains multiple nested folders
to group firewalls and deployments that require similar configurations. Folders that are
already nested can have multiple nested folders as well.
Folders for
Prisma Access
and your NGFWs are separate; you can't group NGFWs in a
folder with
Prisma Access
deployments. However, you can easily apply shared settings
globally across all folders or use Manage: Snippets to easily apply standard settings and policy
requirements across multiple folders.
How to use folders to simplify configuration for NGFWs you are managing with
Strata Cloud Manager
.
To help manage folders and firewalls, you can apply labels to filter
and target specific groups of firewalls for configuration changes. Additionally,
each folder displays the currently installed software version, dynamic content
release versions, and GlobalProtect app Version of the firewalls associated with the
folder.
For firewall folders,
Strata Cloud Manager
supports up to four nested folders within
any given folder hierarchy, with the default
All
Firewalls
folder always being the top-most level of any folder
hierarchy. For example, consider the below when designing your folder hierarchy. In
the example below
Folder1
,
Folder2
,
Folder3
, and
Folder4
are nested under the
All
Firewalls
folder and you can’t best any additional folders to
this particular folder hierarchy. Additionally,
Folder2.1
and
Folder2.2
are nested under
Folder2
and you can’t add any nest any additional
folders either.
Create a Folder
Create a folder to logically group your firewalls for simplified configuration
management. You can create a folder under the default
Firewalls
folder
or under another existing folder.
Log in to
Strata Cloud Manager
.
Select
Workflows
NGFW Setup
Folder Management
and
Add
Folder
.
Give the folder a descriptive
Name
.
(
Optional
)
Enter a
Description
for the
folder.
(
Optional
)
Assign one or more
Labels
.
You
can select an existing label or create a new label by typing the label
you wanted to
create.
Specify where to create the folder
In
.
Select
All Firewalls
or select an existing folder to
nest the folder under
it.
Create
the folder.
Modify a Folder
Modify an existing folder to edit the name, description, and to add or change the
labels. Additionally, you can move or delete the folder as needed.
Log in to
Strata Cloud Manager
.
Select
Workflows
NGFW Setup
Folder Management
and expand the Actions menu.
Modify the folder as needed.
Edit
the folder
Edit the folder
Name
.
(
Optional
) edit the folder
Description
.
Select or create
Labels
.
You can assign entirely different labels to the folder or add
additional labels.
Save
.
Move
the folder and select the
Destination
.
You can move a folder in the following ways.
You can move a folder to nest it under a different folder.
You can move a nested folder under the
Firewalls
folder.
You can move a nested folder from one folder to another.
Move
the folder after you select the folder
destination.
Delete Folder
and click
OK
to confirm.
You can only delete a folder that has no firewalls associated with it and
no folders nested under it.
Folder Management (Prisma Access)
Prisma Access
folders are predefined; you can use them to specify configuration
scope and ensure that Prisma Access deployment types – mobile users, remote
networks, and service connections – receive all global settings and then settings
that are required or specific for each type.
The configurations defined under a folder are inherited by all folders nested under
that folder hierarchy. For example, you can configure settings that are common
across GlobalProtect, Explicit Proxy, Remote Networks, and Service Connections under
the
Prisma Access
folder. Similarly, you can configure settings that are
common across GlobalProtect and Explicit Proxy under the
Mobile Users
Container
and so on.
You cannot edit the folder hierarchy for Prisma Access.
At the folder level, you can also enable web security for the
Prisma Access
mobile user, remote network, or service connection deployment.