topic Re: Panorama Template Overridden objects in Automation/API Discussions

Panorama Template Overridden objects

batd2 — Fri, 28 Feb 2020 16:18:22 GMT

Do you know where in CLI or configuration files we can find Panorama Template objects which were locally overridden on a firewall? I am trying to script for locally overridden configuration settings checks of multiple Panorama-managed firewalls, but noting in the configuration files indicates that the object was overridden.

Do you have more inside understanding of how the override process works and how is it processed by the firewall?

Re: Panorama Template Overridden objects

batd2 — Tue, 10 Mar 2020 07:18:10 GMT

Can anyone suggest a solution?

Re: Panorama Template Overridden objects

MattGowland — Mon, 10 May 2021 06:49:26 GMT

Did you ever find a solution to this?

Re: Panorama Template Overridden objects

cchaffee — Wed, 28 Jul 2021 22:36:23 GMT

I would like to know this as well. I keep running into issues where a pano config isn't applied consistently because someone has intentionally or unintentionally overridden it locally on the device.

Re: Panorama Template Overridden objects

SimonT — Sat, 25 Sep 2021 05:12:31 GMT

same here. Is this information available?

Re: Panorama Template Overridden objects

PavelK — Sat, 25 Sep 2021 13:03:55 GMT

Hello Everyone,

during one of the pre-Covid Ignite, I have asked the same question PAN engineer during one of the session. The answer was there is no way to detect from Panorama side locally overriden configuration. The only advice he could give me, was to enable email alert for configuration changes on local Firewall.

Kind Regards

Pavel

Re: Panorama Template Overridden objects

aortiz — Wed, 10 Nov 2021 23:52:12 GMT

The command show config pushed-template vs show config running or show config merged for comparisons. That’s what I would suggest.