I have setup an HA pair of 5220s and have them added in Panorama all running on 8.1.2. I have setup the Templates and can push out changes to the HA pair. I tried to push an IP change to a subinterface on the pair and though both Panorama and the HA Pair claim to have accepted and commited the changes, the HA Pair still has the old IPs and Pano has the new ones, so they are out of sync. I verified that the 5220s are not overridden on this setting and they claim to be using the template from Pano. I started looking through the template Capabilities and Exceptions and I came across this line "Configure the IP addresses of firewalls in an HA pair" as an exception. Just wanted to see if anyone else has run into this and if it applies to my situation.