An administrator is attempting to create policies for deployment of a device group and template stack. When creating the policies, the zone drop-down list does not include the required zone. What…

Question

Options

• AEnable "Share Unused Address and Service Objects with Devices" in Panorama settings.
• BAdd a firewall to both the device group and the template.
• CSpecify the target device as the master device in the device group.
• DAdd the template as a reference template in the device group.

• A
  3% (2)
• B
  17% (11)
• C
  8% (5)
• D
  72% (46)

Explanation

In Panorama, zones are defined within templates (or template stacks). When authoring security policies in a device group, Panorama needs to know which templates hold the zone definitions. By adding the template (or template stack) as a reference template in the device group settings, Panorama can discover and populate the zone drop-down with zones defined in that template. Without this reference, Panorama cannot determine which zones exist on the targeted devices. Sharing unused objects (A), adding a master device (C), or simply adding a firewall to the group (B) do not resolve the zone visibility issue caused by missing template association.

No community discussion yet for this question.