Configuring MU-SPNs in Panorama
To configure Mobile Users in Panorama, you must navigate to Panorama | Cloud Services | Configuration | Mobile Users – GlobalProtect.
We’ll start by configuring the general settings by clicking the small cogwheel next to Settings, as indicated in the following screenshot:
Figure 6.31 – Mobile Users – GlobalProtect
On the main Settings page, we can see Mobile_User_Template_Stack, Mobile_User_Template, and Mobile_User_Device_Group. These can’t be renamed, and Mobile_User_Template can’t be moved down to prioritize other templates. However, the Parent Device Group value for Mobile_User_Device_Group can be changed. In many cases, it is useful to create a parent device group for both Remote_Network_Device_Group and Mobile_User_Device_Group so that common rules can be created in a single parent rulebase. We’ll see more about rulebases in Chapter 8.
At the bottom, we can choose...
