Management Interface Settings - Can't Change?

[R.Nill]

Got a weird one here, I'm using templates from Panorama but I have one firewall, in an HA pair, that has Telnet enabled on the Administrative Management Services section and it should be set to OFF per my template.  The interface is showing "Template Values Overridden" and when I go into the configuration and try to re-sync the template (hence disabling Telnet) I can't hit OK.  It just doesn't respond, don't understand why it's blocked or greyed out or whatever it's doing.

Configuration isn't locked and I'm a superuser.  Not really sure why I can't change it.

Any thoughts?

[JayGolf · Accepted solution]

Hi @R.Nill ,

I would try removing the setting via the CLI on the fw and then pushing the template via CLI on panorama as well.

[Brandon_Wertz]

---

@R.Nill wrote:

Got a weird one here, I'm using templates from Panorama but I have one firewall, in an HA pair, that has Telnet enabled on the Administrative Management Services section and it should be set to OFF per my template.  The interface is showing "Template Values Overridden" and when I go into the configuration and try to re-sync the template (hence disabling Telnet) I can't hit OK.  It just doesn't respond, don't understand why it's blocked or greyed out or whatever it's doing.

Configuration isn't locked and I'm a superuser.  Not really sure why I can't change it.

Any thoughts?

---

I'm not sure, but I think you mentioned how to fix your issue with your statement.  You mentioned that the GUI says "Template Values Overridden."  This is usually indicated with a "double sprocket."  You should be able to click on that "double sprocket" and revert the config back to what's in your template.  

A word of caution though, make sure you're aware of all of the overrides and that reverting them won't break something you overrode to get something working.

Normal:

Overridden:

[R.Nill]

Yeah, that's the weird thing, when I flip it back to "Normal" I can't hit "OK" to accept going back to the template configuration.  It just won't let me hit "Ok", it acts like it's greyed out or something.  I was hesitant to change it in the CLI because I don't understand why I can't change it in the GUI.  Wasn't sure if it's locked for some other reason or what.  I have a ticket open with support, guess I'll find out from them...just thought this was super weird.

[R.Nill]

Well...I just went ahead and changed it through the CLI, was worried it wouldn't work but it did.  Thanks for the heads up.