Any chance of an Automated Rollback on Palo Alto firewalls?

[TomMeadows]

Hi-

Im familiar with Juniper equipment which all have the option to 'commit confirm' which automatically reverts the config change if a 2nd commit is not made within a certain period (default 10 mins I think).

Its a life-saver if you have to administer remote devices, bbvsince if your change broke connectivity for any reason, in 10 minutes time, your changes get revoked.

I now have to administer a couple of remote Palo Alto systems.

I don't know of any way to automate a rollback in absence of confirmation.

Does anyone know any way to do this?

Does anyone know if this is on the PANOS roadmap?

Thanks

Tom

[BPry]

@KennethMcRae,

Just throwing this out there as an option, but if you have a small node on-site you could use to run a script you can automate a configuration roll-back through the API fairly easily. Ideally this actually gets implemented directly in PAN-OS, but it's a viable option for those that don't use Panorama who want this functionality.