An administrator is attempting to create policies for deployment of a device group and template stack. When creating the policies, the zone drop-down list does not include the required zone. What can the administrator do to correct this issue?
A.
Specify the target device as the master device in the device group
B.
Add the template as a reference template in the device group
C.
Add a firewall to both the device group and the template
D.
Enable "Share Unused Address and Service Objects with Devices" in Panorama settings
In Panorama, zones defined in a template must be linked to a device group for visibility in policy creation. Adding the template as a reference template in the device group (Option B) ensures its zones are available in the policy editor’s drop-down list.
Option A (master device) affects User-ID, not zones. Option C (add firewall) is a prerequisite, not a fix. Option D (share objects) is unrelated to zones. Documentation specifies reference templates for this issue.
[Reference: Panorama Administrator’s Guide, PAN-OS 11.2, "Device Groups and Templates" section., , , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit