How to return to panorama template after override enabled on firewall

josggf — Fri, 10 Apr 2020 03:12:17 GMT

Someone override a Template config section on firewall. What's the best strategy to remove override and go back to panorama pushed config...

Re: How to return to panorama template after override enabled on firewall

SutareMayur — Fri, 10 Apr 2020 06:09:49 GMT

@josggf,

In this case, you need to revert configuration by selecting the overridden configuration so overridden object will revert back to its inherited values. This way manually you can revert configuration one-by-one.

Also there is one more setting under Panorama, i.e. Panorama > Setup > Management --> Panorama Settings --> Objects defined in ancestors will take higher precedence.

This is disabled by default. This setting will replace all objects overrides across Panorama with the values inherited from the shared location or ancestor device group.

Select this option (disabled by default) to specify that the object values in ancestor groups take precedence over those in descendant groups when device groups at different levels in the hierarchy have objects of the same type and name but with different values. This means that when you perform a device group commit, the ancestor values replace any override values. Likewise, this option causes the value of a shared object to override the values of objects of the same type and name in device groups.

Personally i never used this option ever but yes i had followed first way to revert configuration manually.

Hope it helps!

Mayur

Re: How to return to panorama template after override enabled on firewall

BK0007 — Fri, 10 Apr 2020 09:19:13 GMT

I had also performed it manually in our environment and post doing it, everything was normal.

topic How to return to panorama template after override enabled on firewall in General Topics

How to return to panorama template after override enabled on firewall

Re: How to return to panorama template after override enabled on firewall

Re: How to return to panorama template after override enabled on firewall