topic Re: Altering Cloned Template Changes Original? in General Topics

Altering Cloned Template Changes Original?

TSilverline — Fri, 18 Aug 2017 04:18:47 GMT

I've been working with one of my customers on enhancing security across their firewall deployment.

After creating a template in Panorama including management hardening and protocol hardening configurations, they cloned the template so they could apply it on another firewall.

They then updated one of the zone names on the new template. And for some reason this changed the zone name on the original template.

Customer opened a case with Palo Alto TAC and was informed that this is expected behavior.

I am very confused by this response from TAC.

If all changes made to a cloned copy of a template will impact the original template then what is the point of a clone?

Can anyone else confirm or explain this behavior?

Re: Altering Cloned Template Changes Original?

Remo — Fri, 18 Aug 2017 23:36:43 GMT

Cannot confirm and/or explain this. I did exactly that now quite a few times and this never happened on our Panorama appliance.

Maybe there was a missunderstanding between TAC and your customer, but that this should be "expected behaviour" makes absolutely no sense to me.

Re: Altering Cloned Template Changes Original?

TSilverline — Fri, 25 Aug 2017 21:13:44 GMT

Thank you for testing this out for me.

This aligns with all of the other comments I have received from Palo Alto engineers so we are going to have the case re-opened and hopefully requeued to a different engineer.