topic Connecting back to Panorama in Panorama Discussions

Connecting back to Panorama

MP-Firewall — Wed, 15 Oct 2025 20:29:28 GMT

Hi,

We have multiple site connected to central Panorama. Due to some issue we were not able to connect to Panorama. At the same tie we have to do some Policy changes on Local Firewall. These Firewalls are in Active/standby setup. To make change in Policy I had to "disable Panorama Policy and object"

I also disabled the sync from primary to secondary

Now Panorama is connected, but if I enable Panorama Policy and object, I am afraid it will form duplicate rule base, one local and one pushed from Panorama.

What is the best way to avoid this?

I did take a backup of the firewall before doing these changes. If I restore the backup will there be any outage ?

Re: Connecting back to Panorama

reaper — Thu, 16 Oct 2025 10:18:35 GMT

make sure you add the new rules to panorama and then push the config making sure you enable 'force template values' else it won't work

once all the panorama config is back, delete all the local rules

Re: Connecting back to Panorama

MP-Firewall — Thu, 16 Oct 2025 17:15:55 GMT

Will there be any expected outage, in its operation.

Re: Connecting back to Panorama

reaper — Fri, 17 Oct 2025 08:30:28 GMT

Unless you ended up making a bunch of other changes, there shouldn't be an outage, simply recommitting the same config

Re: Connecting back to Panorama

MP-Firewall — Fri, 24 Oct 2025 20:44:52 GMT

Unfortunately as I feared it did not work, and was getting Validation error, pointing to some application object I created. Luckily I took the backup prior to the change and that Helped. Always take device state backup before any such incident. Its the easiest way of restoring back the connectivity