Some basic understanding / about pushing commit

[fatboy1607]

When we push commit to firewall does it interrupt traffic with  dataplane  , secondly how can we roll back  last commit

Thanks for helping me understand.

[HULK]

Hello Mandar,

The firewall should not be impacted due to commit process. ( assuming that, you are not changing any security parameter on new config, which can impact to production traffic)

To rollback config, you may go to Device > Setup > Operation > load configuration version.

FYI:

If this answers your question, please mark as 'answered' and any 'helpful' replies.

Thanks

[oklier]

Once you roll back the config, you will have to commit that config since it will only be a candidate config at that point.

[pulukas]

When doing a commit only the sections of the configuration that have changed are applied.  So if you are not changing the config section as organized by the tabs there is no user impact.

You can also choose in the newer PanOS versions to commit only the Device/Network or only the Policy/Object sections to minimize your user impacts.

For security policy updates, you also make a choice on whether to rematch existing sessions for all new policy commits as a global setting for the firewall.  This is a session parameter on the device tab.

How Session Rematch Works