08-17-2017 09:18 PM
I've been working with one of my customers on enhancing security across their firewall deployment.
After creating a template in Panorama including management hardening and protocol hardening configurations, they cloned the template so they could apply it on another firewall.
They then updated one of the zone names on the new template. And for some reason this changed the zone name on the original template.
Customer opened a case with Palo Alto TAC and was informed that this is expected behavior.
I am very confused by this response from TAC.
If all changes made to a cloned copy of a template will impact the original template then what is the point of a clone?
Can anyone else confirm or explain this behavior?
08-18-2017 04:36 PM
Cannot confirm and/or explain this. I did exactly that now quite a few times and this never happened on our Panorama appliance.
Maybe there was a missunderstanding between TAC and your customer, but that this should be "expected behaviour" makes absolutely no sense to me.
08-25-2017 02:13 PM
Thank you for testing this out for me.
This aligns with all of the other comments I have received from Palo Alto engineers so we are going to have the case re-opened and hopefully requeued to a different engineer.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
