Centralizes multi-vsys firewall configuration to eliminate object duplication, reduce
memory use, and prevent commit failures
The
Enhanced Shared Optimization feature now
significantly improves how Panorama pushes configurations to multi-vsys firewalls,
resolving critical challenges like object duplication, memory exhaustion, and commit
failures.
The feature introduces the Full optimization mode, which lets you move all
firewall objects into the shared location of the firewall. This includes the
previously excluded objects, such as external dynamic lists (EDLs), Custom URL
categories, and various Security Profiles, such as antivirus, antispyware, URL
Filtering, and HIP objects. This eliminates object replication across individual
virtual systems. It drastically reduces configuration size in typical deployments
and prevents commit failures caused by exceeding object limits.
This enhancement streamlines management, increases scalability, and
prevents deployments from hitting object limits.