topic Concurrent Policy Installation in General Topics

Concurrent Policy Installation

Imposter — Mon, 04 Dec 2023 18:40:01 GMT

Could someone help me from which PAN-OS version can we do Concurrent Policy installation ?

For example : Admin A and Admin B can push 2 different Access Policy to 2 different Clusters ?

Re: Concurrent Policy Installation

kiwi — Wed, 06 Dec 2023 13:56:43 GMT

Afaik this still isn't possible.
In fact I found a feature request to which you can have your local SE add your vote to:

FR 11911:

Commit - admin context

Description: Multiple admin doing concurrents commits & push, different team (ex: MSSP and SOC teams).

Kind regards,

-Kim.

Re: Concurrent Policy Installation

OtakarKlier — Thu, 07 Dec 2023 20:14:55 GMT

Hello,

The way to best do this is to use commit locks. This way only one person can make a change at a time and the commits get queued. But cant have admin A before admin B at all times.

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/web-interface-basics/lock-configurations

Hope that makes sense.