Static Routes not updating Panorama to Firewalls

[Jatin.Singh]

firewalls are not receiving the Static Routes added to Panorama.

Do these need to be entered manually in the Firewalls or how do we propagate these changes?

The Firewalls and Panorama are synched and other changes to Panorama are synched to the firewalls when I commit.

The Static Routes are not synching even though I have committed the change.

No error all seems fine when we commit,  I thought this was completed and checked the firewalls only to find the Static Routes had not synched.

[BatD · Accepted solution]

@Jatin.Singh You need to select “Force Template Values” when pushing the template config to the firewall.

The issue is that the configuration object is in fact the whole Virtual Router and not the individual static routes. So if you had many any change to the VR locally on the firewall, the VR will be seen as  overridden and no new Panorama template changes will be applied to the it, unless you select to force template values. However be aware that will override any overlapping local firewall changes.

[Jatin.Singh]

@BatD Thank you very much

found a KB in relation to it aswell

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh7CAC

[BatD]

@Jatin.Singh Yes, this is what I was trying to explain. You either manage the routes in Panorama templpate or localally on the firewall for the same VR. You can't mix the two and to fix it you will need to decide which routes do you need to keep.