Assigning a common configuration to appliances using templates

Overview

Command Center Configuration Templates enable you to replicate a configuration across multiple NG Firewall appliances. This is useful for example if you want to have a standby failover system, or if you manage multiple deployments that use an identical configuration. Configuration replication works in combination with Configuration Backup.

keep-in-sync.png

NG Firewall configuration replication can include a complete configuration or specific sections of the configuration. You can manage both options in the Policies area of Command Center.

  • To push the complete configuration use Templates. Note that the network configuration is excluded from the template.
  • To push specific types of the configuration such as Firewall rules or Captive Portal settings, use the options beneath templates in the Policies menu. See How To Set Appliance (Aka Push) Policies

Prerequisites

  • Configuration templates are based on backups. Therefore you must install and enable Configuration Backup.
  • Each NG Firewall appliance must be connected to Command Center and added to your account.
  • Policy Manager must be installed on each appliance.
  • Each appliance must be running version 13.2 and above.

Note: If you use Policy Manager to create custom policies, you must create the same policy names on each appliance. Otherwise only the default policy synchronizes to each appliance.

Creating Templates

To create a template:

  1. Navigate to the Policies tab in Command Center.
  2. In the menu on the left, click Template Configuration.
  3. Click Create Template to open the template configuration wizard.
  4. Choose an appliance you want to use as the configuration master and click Next.
  5. Choose a recent backup and click Next.
  6. Choose appliances to sync from the master.Screen_Shot_2018-09-06_at_9.16.22_AM.png
  7. If you want the appliances to synchronize when you make changes to the master, enable Keep in Sync and set a schedule.keep-in-sync.png
  8. Enable Sync All New Appliances if you want to apply this configuration template to appliances you add to your account.
  9. Click Next.
  10. On the final step, click Sync Now to apply the configuration template.
  11. Click Close.

Managing Templates

Sorting and Filters

The Template Configuration grid displays your templates and relevant details in sortable and filterable columns. You can manage these options and show or hide columns by clicking the down arrow to the right of any column header to access the menu.config-templates-grid-menu.png

Sync options

Sync Now - You can manually initiate a configuration sync by selecting one or more templates and clicking Sync Now. You can also configure appliances to synchronize automatically.

Keep in Sync - You can set a sync schedule as Immediate, Daily, or Weekly. You can configure the Keep in Sync option when creating a new configuration template, or afterwards by selecting the template and clicking Manage Template.

Note: When synchronizing a configuration, the appliance requires a reboot. Assign a schedule outside of peak usage hours to reduce service interruption.

Target Appliances

Target Appliances inherit the configuration of the Master Appliance based on the sync options. You configure target appliances when creating a new configuration template, or afterwards by selecting the template and clicking Manage Template.Target Appliances

Sync All New Appliances - You can push a configuration to devices when you add them to your Command Center account. If enabled, new appliances automatically become a target appliance. You can configure this option when creating a new configuration template, or afterwards by selecting the template and clicking Manage Template.

Note: Each NG Firewall appliance must be on the same version. The configuration does not sync unless the version of the appliance matches the version of the master appliance.

Deleting Templates

To delete one or more templates, select the template and click Delete Templates.

Follow
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.

Powered by Zendesk