Use template and template stack variables where appropriate
to help manage your managed firewall configuration with fewer templates
and streamline your configuration.
For example, IP addresses
typically differ across firewalls. Using template variables, you
can create the configuration you need by specifying a variable instead
of an IP address. When the configuration is pushed to your managed firewalls,
Panorama can populate the correct IP address per firewall based
on the value configured per managed firewall.
Create variables with the default value of
ensure the incorrect configuration is not accidentally pushed to
the managed firewall.
A notable exception to this is a DNS
IP address. In a worst case scenario, the managed firewall should
still able to resolve DNS queries.