Use template and template stack variables where appropriate to help manage your managed firewall configuration with fewer templates and streamline your configuration.

For example, IP addresses typically differ across firewalls. Using template variables, you can create the configuration you need by specifying a variable instead of an IP address. When the configuration is pushed to your managed firewalls, Panorama can populate the correct IP address per firewall based on the value configured per managed firewall.

Create variables with the default value of

None

to ensure the incorrect configuration is not accidentally pushed to the managed firewall.

A notable exception to this is a DNS IP address. In a worst case scenario, the managed firewall should still able to resolve DNS queries.