Discover and Manage On-Premises Firewall Management Center Network Objects

If you have an on-premises Firewall Management Center that you manage using Security Cloud Control and you want to share and manage its objects, perform these steps:

Procedure


Step 1

Choose Administration > Integrations > Firewall Management Center from the navigation pane to view the Services page.

Step 2

If you already have onboarded an on-premises Firewall Management Center to Security Cloud Control, select it.

If you want to onboard a new on-premises Firewall Management Center, see Onboard an On-Prem Firewall Management Center.

Step 3

Choose Settings from the Actions pane on the right. The Actions pane does not appear when you select more than one on-premises Firewall Management Center.

Note

You must be an admin or super admin to use Settings.

Step 4

Enable the Discover & Manage Network Objects toggle button. If you want your changes to be automatically synchronized with on-premises Firewall Management Center and not staged for review, turn the Enable automatic sync of network objects toggle on.

Note
  • You cannot turn on the Discover & Manage Network Objects toggle if the selected on-premises Firewall Management Center has one or more child domains or if it has the Change Management workflow enabled.

  • You cannot turn on the Enable automatic sync of network objects toggle if the Discover & Manage Network Objects toggle is set to off.

For every new on-premises Firewall Management Center onboarded to Security Cloud Control, this toggle button needs to be enabled manually. After you enable this option, Security Cloud Control discovers objects from your on-premises Firewall Management Center. Then, you can share and manage these objects and use them to set consistent object definitions across other platforms managed by Security Cloud Control.

In Security Cloud Control, when you add overrides to objects that are discovered from an on-premises Firewall Management Center and push the changes back, these objects begin accepting overrides, even if they did not before. The Allow Overrides check box in the View Network Object window is selected automatically when an override is added from Security Cloud Control.

Note

If you want to assign already-existing objects in Security Cloud Control to your on-premises Firewall Management Center, choose the on-premises Firewall Management Center and click Assign Objects from the Actions pane.