topic Re: commit failure and PA admins in General Topics

commit failure and PA admins

PaloAlto18 — Tue, 13 Jul 2021 14:13:36 GMT

Hi Team,

user 1 log into firewall
Did config changes and hit it commit
Say for some reason that commit failed.

He did not check commit status and log out
Another user logged in he did his changes
And when doing commit he selects his user
Name then will his commit work?

Re: commit failure and PA admins

Mick_Ball — Tue, 13 Jul 2021 15:10:49 GMT

Hi @PaloAlto18

Yes the commit will work and it will show a partial commit as per below.

but if he does not select his name then the commit fail and it will tell you why it's failing.

Or.... you can of course select config>revert changes to remove the failed change.

Re: commit failure and PA admins

MP18 — Tue, 13 Jul 2021 15:31:52 GMT

@PaloAlto18 Yes commit will work for current user as explained by MickBall.

Regards

Re: commit failure and PA admins

paulfunk — Wed, 14 Jul 2021 21:44:03 GMT

I am using Panorama to manage several PA firewalls. I performed a commit for several firewalls to Panorama, both templates and device groups, and then attempted a "push to devices" which failed for a couple of the firewalls because they have been temporarily removed from service. The pushes are still pending in Panorama and I have attempted to revert them but, Panorama indicates there are no changes to revert.

I'm wondering how I get these changes out of the Panorama running config. The changes were primarily removing expired certificates.

Any thoughts?