topic Static Routes not updating Panorama to Firewalls in General Topics

Static Routes not updating Panorama to Firewalls

Jatin.Singh — Tue, 21 Jul 2020 07:24:31 GMT

firewalls are not receiving the Static Routes added to Panorama.

Do these need to be entered manually in the Firewalls or how do we propagate these changes?

The Firewalls and Panorama are synched and other changes to Panorama are synched to the firewalls when I commit.

The Static Routes are not synching even though I have committed the change.

No error all seems fine when we commit, I thought this was completed and checked the firewalls only to find the Static Routes had not synched.

Re: Static Routes not updating Panorama to Firewalls

BatD — Wed, 11 Sep 2019 07:58:38 GMT

@Jatin.Singh You need to select “Force Template Values” when pushing the template config to the firewall.

The issue is that the configuration object is in fact the whole Virtual Router and not the individual static routes. So if you had many any change to the VR locally on the firewall, the VR will be seen as overridden and no new Panorama template changes will be applied to the it, unless you select to force template values. However be aware that will override any overlapping local firewall changes.

Re: Static Routes not updating Panorama to Firewalls

Jatin.Singh — Thu, 12 Sep 2019 00:04:45 GMT

@BatD Thank you very much

found a KB in relation to it aswell

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh7CAC

Re: Static Routes not updating Panorama to Firewalls

BatD — Thu, 12 Sep 2019 06:33:21 GMT

@Jatin.Singh Yes, this is what I was trying to explain. You either manage the routes in Panorama templpate or localally on the firewall for the same VR. You can't mix the two and to fix it you will need to decide which routes do you need to keep.