Some basic understanding / about pushing commit
cancel
Showing results for 
Search instead for 
Did you mean: 

Some basic understanding / about pushing commit

L4 Transporter

When we push commit to firewall does it interrupt traffic with  dataplane  , secondly how can we roll back  last commit

Thanks for helping me understand.

SD-WAN | Cloud Networking | PCNSE | ICSI CNSS | MCNA | | CCNP | CCSA | SPSP | SPSX | F5-101 | CCIE-SEC-Attempted
3 REPLIES 3

L7 Applicator

Hello Mandar,

The firewall should not be impacted due to commit process. ( assuming that, you are not changing any security parameter on new config, which can impact to production traffic)

To rollback config, you may go to Device > Setup > Operation > load configuration version.

FYI:

load-config.JPG

If this answers your question, please mark as 'answered' and any 'helpful' replies.


Thanks

Once you roll back the config, you will have to commit that config since it will only be a candidate config at that point.

L7 Applicator

When doing a commit only the sections of the configuration that have changed are applied.  So if you are not changing the config section as organized by the tabs there is no user impact.

You can also choose in the newer PanOS versions to commit only the Device/Network or only the Policy/Object sections to minimize your user impacts.

For security policy updates, you also make a choice on whether to rematch existing sessions for all new policy commits as a global setting for the firewall.  This is a session parameter on the device tab.

How Session Rematch Works

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!