commit confirmed X on PaloAlto firewall ?

[james.looney]

Hello All,

   I am a newbie to PA firewalls but have some experience with JunOS firewalls. I like the "commit confirmed XX" command on JunOS because it will revert a change after XX minutes if for some reason I get locked out. A good example is when changing speed/duplex on an edge firewall that I may get locked out of. Is there an equivalent command on PA firewalls? Please advise. Thanks. -Jim

[dlopez]

I agree this would be a good feature.

[zarina · Accepted solution]

We do not have a support for this feature at this time. Please contact your SE to file a feature request if you want this included in the future versions.

[gswcowboy]

Please have your local Sales SE submit a Feature Request on your behalf. The FR ID is 204.

[james.looney]

Thanks for the input folks. I will submit the feature request. -Jim

[J.Vendramin]

Hello all,

Do we have any update on the FR ID 204?

A 'commit confirmed' feature implemented in Palo Alto devices would be fantastic!

Thanks in advance,

Joelson Vendramin

[TomYoung]

Although this is not "commit confirmed", there is Automated Commit Recovery if you have Panorama.  If the NGFW cannot reach Panorama after a commit, it reverts to the previous commit.

https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/administer-panorama/enable-automated-...