Focus

VM-Series Deployment Guide

Panorama Plugin for Cisco ACI Dashboard

Table of Contents

Panorama Plugin for Cisco ACI Dashboard

The Panorama plugin for Cisco ACI dashboard provides a bird’s-eye view of the ACI infrastructure monitored by the plugin. The dashboard consists of two pages—the first page provides an overview of various objects monitored by the plugin on a set of clickable tiles; clicking a tile takes you to the second page that provides further information about the object displayed on the tile.

After installing the plugin, you can access the dashboard by selecting PanoramaCisco ACIDashboard.

The dashboard only queries for and counts pre-rule security policies configured on Panorama; it does not include post-rules, default-rules, or NAT rules.

Dashboard Tiles	Description
Tenant Tags If a tenant’s health score is zero (0) on the APIC, Panorama does not retrieve information about that tenant. Therefore, the tenant count on Panorama will not match the total on the APIC.	Displays the total number of tenants Panorama retrieved from the APIC. Additionally, it displays the number of dynamic address groups associated with tenants and the number of tenants used in policy. Click the tile to drill down and view the following columns. Tenant Name—list all the tenants retrieved by Panorama. Tenant Tag—the Panorama tag associated with each tenant. Dynamic Address Group—displays the dynamic address groups associated with the listed tag. In Policy—shows if the listed dynamic address group is used in policy.
Application Profiles	Displays the total number of application profiles Panorama retrieved from the APIC. Additionally, it displays the number of dynamic address groups associated with application profiles and the number of application profiles used in policy. Click the tile to drill down and view the following columns. Application Profile Name—lists all application profiles retrieved by Panorama. Tenant Name—displays the tenant associated with the listed application profile. Application Profile Tag—the Panorama tag associated with each application profile. Dynamic Address Group—displays the dynamic address groups associated with the listed tag. In Policy—shows if the listed dynamic address group is used in policy.
End Point Groups	Displays the total number of end point groups (EPG) Panorama retrieved from the APIC. Additionally, it displays the number of dynamic address groups associated with EPGs and the number of EPGs used in policy. Click the tile to drill down and view the following columns. EPG Name—lists all EPGs retrieved by Panorama. Application Profile Name—lists the EPG’s associated application profile. Tenant Name—displays the tenant associated with the listed application profile. EPG Tag—the Panorama tag associated with each EPG. Dynamic Address Group—displays the dynamic address groups associated with the listed tag. In Policy—shows if the listed dynamic address group is used in policy.
Micro End Point Groups	Displays the total number of micro end point groups (EPG) Panorama retrieved from the APIC. Additionally, it displays the number of dynamic address groups associated with micro EPGs and the number of micro EPGs used in policy. Click the tile to drill down and view the following columns. Micro EPG Name—lists all EPGs retrieved by Panorama. Application Profile Name—lists the Micro EPG’s associated application profile. Tenant Tag—displays the tenant associated with the listed application profile. Micro EPG Tag—the Panorama tag associated with each Micro EPG. Dynamic Address Group—displays the dynamic address groups associated with the listed tag. In Policy—shows if the listed dynamic address group is used in policy.
Bridge Domains	Displays the total number of bridge domains Panorama retrieved from the APIC. Additionally, it displays the number of dynamic address groups associated with brdige domains and the number of bridge domains used in policy. Click the tile to drill down and view the following columns. Bridge Domain Name—lists all bridge domains retrieved by Panorama. Tenant Name—displays the tenant associated with the listed bridge domain. Bridge Domain Tag—the Panorama tag associated with each bridge domain. Dynamic Address Group—displays the dynamic address groups associated with the listed tag. In Policy—shows if the listed dynamic address group is used in policy.
Service Graphs	Displays the total number of Service Graphs monitored by the plugin as well as well as the number of firewalls in line with monitored service graphs. Click the tile to drill down and view the following columns. Service Graph Name—lists all service graphs retrieved by Panorama. Producer EPG—displays the producer EPG associated with the service graph. FW InLine—displays the firewall associated with the service graph.

Configure the Cisco ACI Plugin

Set Up the VM-Series Firewall on Cisco CSP