Connecting back to Panorama

[MP-Firewall]

Hi, 

We have multiple site connected to central Panorama. Due to some issue we were not able to connect to Panorama. At the same tie we have to do some Policy changes on Local Firewall. These Firewalls are in Active/standby setup. To make change in Policy I had to "disable Panorama Policy and object"

I also disabled the sync from primary to secondary 

Now Panorama is connected, but if I enable Panorama Policy and object, I am afraid it will form duplicate rule base, one local and one pushed from Panorama. 

What is the best way to avoid this?

I did take a backup of the firewall before doing these changes. If I restore the backup will there be any outage ?

[reaper]

make sure you add the new rules to panorama and then push the config making sure you enable 'force template values' else it won't work

once all the panorama config is back, delete all the local rules

[MP-Firewall]

Will there be any expected outage, in its operation.  

[reaper]

Unless you ended up making a bunch of other changes, there shouldn't be an outage, simply recommitting the same config

[MP-Firewall · Accepted solution]

Unfortunately as I feared it did not work, and was getting Validation error, pointing to some application object I created. Luckily I took the backup prior to the change and that Helped. Always take device state backup before any such incident. Its the easiest way of restoring back the connectivity