Benifit of Target Tab in security policy on Panorama.

[yadsingh]

Hi Guys. 

Good day!
I would like to know that what is the benifit of target tab on Panorama. 

For eg. 

I create a shared policy. Now I push it to firewalls I choose using device group while commit. 

Now I create shared policy and choose target (never done it). Do I need to commit on device group than?

What will happen if I commit on all devices but choose target as few?

Can anyone help me with this. 

[pulukas]

Target is a way to have a particular rule only apply to some of the group members and not others.  This is a way to keep rules in Panorama that might otherwise need to be created as local rules on just some firewalls inside the group.

[yadsingh]

Thank you for your reply. I am sorry if i am asking again. Does it differ from a commit on certain device group. If anyone has link for me to study on this it will be great. 

[pulukas · Accepted solution]

These topics are covered in the Panorama admin guide.

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide

Commit Panorama makes the changes active on the the mgmt system

commit device groups pushes the changes that are in Panorama to the devices or the group selected

These are the options to actually do the changes on the devices.  As opposed to configuring the policy for where it will apply.

[yadsingh]

Finally understood it. You are awesome.