About Zain_Chaudhry

@Zain_Chaudhry, In addition to what @kiwi mentioned, is it actually every site and does the firewall itself trust the root certificate of the website in question. Some countries I've had customers operating in actually have a root CA that you need to add into the firewall and add it as a trusted root CA as they perform their own inspection. You could also be visiting sites that are simply issued by root CAs not trusted by the firewall, and you'll likewise need to import the root CA and mark it as a trusted Root CA so the firewall actually trusts the certificate being presented by the website in question.  ... View more

Please explain the steps you took to import the configuration into the Panorama, as well as steps to try and save or push from the Panorama.   Did you make any changes to to the template BEFORE you pushed it back down to the FW. The steps are normally.: Import FW Config.  Commit to Panorama.  Export FW Bundle to FW (from within Panorama), then Push to Devices, and push (again) to FW.    After these steps are done, you should have exact config from FW into Panorama, and then back onto the FW.  If you are making changes to the template prior to Export to FW bundle, this could be where your issue is at.   Let us know. ... View more