Use snippets to group configurations that you can quickly push to your firewalls or
deployments.
Where Can I Use This?
What Do I Need?
Prisma Access
(Cloud Management)
NGFWs (Cloud Managed)
AIOps for NGFW Premium
license
Prisma Access
license
Use snippets to group configurations that you can quickly push to
your firewalls or deployments.
A snippet is a configuration object, or grouping of
configuration objects, that you can associate with a folder, deployment, or device.
Snippets are used to standardize a common base configuration for a set of firewalls or
deployments allowing you to quickly onboard new devices with a known good configuration
and reducing the time required to onboard a new device. For example, you onboard a new
firewall in a remote branch office. You can associate a set of snippets that contain all
of the required network and policy rule configurations with the folder the new firewall
belongs to. This reduces the time required to set up the firewall to protect the remote
branch office.
Snippet associations have a top-down priority in the
event of conflicting values. This means that if the first and the last associated
snippets have different values for the same object, the value from the first snippet is
inherited by the device or deployment. Additionally, all configurations inherited from a
snippet can be overridden at the child folder, deployment, or device
level.
Within a folder hierarchy, a snippet might
only be associated one time within any folder hierarchy. This means that a snippet can’t
be associated with both a folder and the folder nested under it. However, you can
associate the same snippet with different folders or folders nested under different
folders. Snippets that are already associated with a folder in the folder hierarchy are
grayed out so they can’t be used more than once where
applicable.
Create a Snippet
Create and associate a snippet with a folder, deployment, or device to apply a
common base configuration to a group of devices. You can associate as many
snippets with a folder, deployment, or device as needed.
Snippets can be modified and reassociated with any folder, deployment, or device
at any time after creation.
Custom snippets that are no longer in use can be deleted.
Log in to
Strata Cloud Manager
.
Select
Manage
Configuration
NGFW and Prisma Access
Overview
and expand the Configuration Scope to view the
Snippets
.
Add
Snippet
.
Create the snippet.
Give the snippet a descriptive
Name
.
(
Optional
) Enter a
Description
for
the snippet.
(
Optional
) Assign one or more
Labels
.
You can select an existing label or create a new label by typing
the label you wanted to create.
Create
.
Create your snippet configuration.
You’re now in the Configuration Scope for the snippet. All configurations
you create while in the snippet scope occurs only for the snippet.
While in the snippet scope, you can review the snippet
Overview
to see detailed information about
the snippet. This includes information such as the number of variables,
information about the snippet was created and last updated, and the list
of all folders, deployments, and devices the snippet is associated
with.
Associate a snippet.
Select
Manage
Configuration
NGFW and Prisma Access
Overview
and expand the Configuration Scope to view the
Config Tree
.
Select the folder, deployment, or device you want to associate the
snippet with.
Edit the
Config Snippet
.
Add the snippets that you want to associate and order them as
needed.
Modify your snippet configurations, details, and associations.
Custom snippets no longer associated with a folder,
deployment, or device can be deleted.
Log in to
Strata Cloud Manager
.
Select
Manage
Configuration
NGFW and Prisma Access
Overview
and expand the Configuration Scope to view the
Snippets
.
Select the snippet you want to modify.
After you select a snippet, you’re redirected to the snippet
Overview
.
(
Optional
) Edit the snippet to modify the
Name
,
Description
, or to
change or assign additional
Labels
.
Save
your edits to apply them.
Edit the
Snippet Associations
to reassociate the
snippet with a different folder, deployment, or device or to associate the
snippet with additional folders, deployments, or devices.
Exit the snippet reassociation screen to apply the changes.
Make any changes to the snippet configuration as needed.
Push Config
.
Delete a Snippet
Delete your custom snippets to keep your configurations organized. Snippets must
be unassociated with any firewalls, folders, or deployments before they are able
to be deleted. Deleting predefined snippets is not supported.
Log in to
Strata Cloud Manager
.
Select
Manage
Configuration
NGFW and Prisma Access
Overview
and expand the
Configuration Scope
to
view the Snippets.
Click the three vertical dots of the custom snippet you want to
delete.
Delete
the snippet.
Snippets currently associated with folders, deployments, or devices
can't be deleted. You must first edit the
Snippet
Associations
to remove all existing associations
before it can be deleted.