Do Panorama-created Pre-Rules still work if Panorama goes down?

[MDroyKT]

Hi Community,

I have a newer implementation of Panorama and saw on the Palo Alto subreddit that if Panorama goes down, all the Pre- and Post-Rules will not work and only Local rules on the firewalls will apply.

I thought that when you create policies in Pre-Rules on Panorama and then push them to devices, that they now exist on the device's configuration. However, I know that they are not considered Local rules in this case, so that's why I'm unsure of the impact if Panorama goes down.

Thanks!

[PavelK · Accepted solution]

Hello @MDroyKT

if Panorama goes down the pre-policy will continue to function (The same applies to post-policy). You only not be able to make changes to Panorama managed policies until Panorama is back online.

Kind Regards

Pavel

[MDroyKT]

Got it. Thank you PavelK!