Static Routes not updating Panorama to Firewalls

Reply
L2 Linker

Static Routes not updating Panorama to Firewalls

firewalls are not receiving the Static Routes added to Panorama.

Do these need to be entered manually in the Firewalls or how do we propagate these changes?

 

The Firewalls and Panorama are synched and other changes to Panorama are synched to the firewalls when I commit.

The Static Routes are not synching even though I have committed the change.

 

No error all seems fine when we commit,  I thought this was completed and checked the firewalls only to find the Static Routes had not synched.

 

Capture1.PNG

Tags (2)
L4 Transporter

Re: Static Routes not updating Panorama to Firewalls

@Jatin.Singh You need to select “Force Template Values” when pushing the template config to the firewall.

Capture.PNG

 

The issue is that the configuration object is in fact the whole Virtual Router and not the individual static routes. So if you had many any change to the VR locally on the firewall, the VR will be seen as  overridden and no new Panorama template changes will be applied to the it, unless you select to force template values. However be aware that will override any overlapping local firewall changes.

L2 Linker

Re: Static Routes not updating Panorama to Firewalls

@BatD Thank you very much

 

found a KB in relation to it aswell

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh7CAC

L4 Transporter

Re: Static Routes not updating Panorama to Firewalls

@Jatin.Singh Yes, this is what I was trying to explain. You either manage the routes in Panorama templpate or localally on the firewall for the same VR. You can't mix the two and to fix it you will need to decide which routes do you need to keep. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!