topic Re: Some basic understanding / about pushing commit in General Topics

Some basic understanding / about pushing commit

fatboy1607 — Fri, 09 Jan 2015 06:07:50 GMT

When we push commit to firewall does it interrupt traffic with dataplane , secondly how can we roll back last commit

Thanks for helping me understand.

Re: Some basic understanding / about pushing commit

HULK — Fri, 09 Jan 2015 06:41:14 GMT

Hello Mandar,

The firewall should not be impacted due to commit process. ( assuming that, you are not changing any security parameter on new config, which can impact to production traffic)

To rollback config, you may go to Device > Setup > Operation > load configuration version.

FYI:

If this answers your question, please mark as 'answered' and any 'helpful' replies.

Thanks

Re: Some basic understanding / about pushing commit

oklier — Fri, 09 Jan 2015 21:57:01 GMT

Once you roll back the config, you will have to commit that config since it will only be a candidate config at that point.

Re: Some basic understanding / about pushing commit

pulukas — Sat, 10 Jan 2015 13:34:54 GMT

When doing a commit only the sections of the configuration that have changed are applied. So if you are not changing the config section as organized by the tabs there is no user impact.

You can also choose in the newer PanOS versions to commit only the Device/Network or only the Policy/Object sections to minimize your user impacts.

For security policy updates, you also make a choice on whether to rematch existing sessions for all new policy commits as a global setting for the firewall. This is a session parameter on the device tab.

How Session Rematch Works