Panorama Firewall only device Groups - Add template/Template Stack
Dear All:
Very good afternoon, as always, thank you very much for your help and collaboration.
I have the following scenario:
In Panorama, version 9.1.10 you have several firewall, with their respective Device Groups and Template/Template-Stack, but I have a couple of firewall, in HA, that only have one Device-Groups, they do not own, they do not have template/template stack.
Therefore the Firewalls at Device and Networks level, have their configurations locally. So the question is, what would be the correct steps to add a template to these firewalls? Import the configuration (Import Device) and then review and / or debug settings? My doubt is as it already has a Device Groups when I import it, it will generate problems because the firewalls already exist in a Device Groups and already exist as devices administered and managed by PANORAMA, but only at Device Group level and not Templates.
Please help me to recommend the best way to execute this task, minimizing the possible impact,
I remain attentive, thank you very much, best regards.
1. Unassign the device from the current device groups 2. Import (new device group + template is created) 3. Unassign from new device group, reassign to previous device group 4. Review 'new' device group for anything that may not be in the original device group and merge/transplant config to old device group 5. You are now ready to push the whole package and make firewall fully panorama managed