Hello @Schwarzer
If you change the name of the Zone in panorama, it will (at least that's my experience from ~1 year ago) change all and every object with the same name. Even if this is OK for you, you might end up with the situation that "device groups" and "templates" are not installed at exactly the same time. Policies require a zone which does not yet exist, or interface is bound to a zone where no rule has this zone listed (hence not granting traffic).
We created a new zone with the new name, added this zone to all rules where required and pushed the config to the firewalls. Once this was done we replaced the zone on the interface(s) and pushed again.
... View more