Adding Firewall to Panorama

Refer to How to Add a Locally Managed Firewall to Panorama Management.

  1. Add the firewall to the Panorama-managed devices list.

    1. Log into Panorama, select Panorama > Managed Devices and click Add.

    2. Enter the serial number of the firewall and click OK.

    3. Commit. For the Commit Type, select Panorama and click Commit again.

  2. Set up a connection from the firewall to Panorama.

    1. Log in to the firewall, select Device > Setup, and edit the Panorama Settings.

    2. In the Panorama Servers fields, enter the IP addresses of the Panorama management server.

    3. Click OK and Commit.

  3. Make any necessary configuration changes and commit your changes to the VMs.

    1. Click Commit and for the Commit Type select Device Group.

    2. Select Merge with Device Candidate Config, mark the Include Device and Network Templates checkbox, and click Commit.

  4. Go back to Panorama > Managed Devices > Summary and mark the checkbox for the device which should show "Connected."

Port 3978 also needs to be allowed on the firewall side.

Adding the Device into the Desired Template Stack and Device Group

  1. Go to Panorama > Template, select the desired template stack, and check the firewall from the device list.

  2. Go to Panorama > Device Group, select the desired group and check the firewall from the device list.

  3. Commit and push.

Integrating Panorama with CoPilot

Complete the vendor integration steps here. After this step, the Panorama and PAN firewalls are attached to the Controller.