I have a scenario where we have 70 firewalls, in HA pairs, managed by Panorama.
Templates are set up, and pushed to the firewalls, but *some* of the firewalls have template overrides set for various things.
I am looking for a good way to identify, whithout visually eyeballing every web gui page on every firewall, which settings on individual firewalls are overriden from the template.
I am able to script out both api calls and cli commands, but neither one seems to be able to provide anything I can identify an override with, with no real difference, for instance, in the cli "set" commands between an template setting and an overridden setting. Any good ideas?
