Manage: Push Config
Focus
Focus
Strata Cloud Manager

Manage: Push Config

Table of Contents

Manage: Push Config

How to use
Strata Cloud Manager
to push configuration changes to your NGFWs and Prisma Access.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Cloud Management)
  • NGFW (Cloud Managed)
  • VM-Series, funded with Software NGFW Credits
  • AIOps for NGFW Premium license (use the Strata Cloud Manager app)
  • Prisma Access
    license
After you make configuration changes and are ready to activate them, you must push the changes to your firewalls. You have the option to push all configuration changes or to select specific administrators to include in the push. Pushing changes from all administrators is required for your first configuration push. You can choose which configuration changes you want to push to Prisma Access:
You can push a configuration while another configuration push is taking place. Prisma Access applies configuration changes in the order you submit them.
In the event a configuration is pushed in error, or a change causes network or security disruption, you can revert the Prisma Access configuration to the most recent running Prisma Access configuration. This allows you to revert the Prisma Access configuration back to a running configuration you know is functional and does not compromise your network security. You do not have the option to select a specific running configuration. Prisma Access automatically selects the last known running configuration and reverts to it.
  1. Log in to
    Strata Cloud Manager
    .
  2. Make configuration changes as needed.
  3. Push Config
    and
    Push
    your configuration changes.
    Alternatively, you can select
    Manage
    Operations
    Push Config To Devices
    .
  4. (
    Optional
    )
    Add New Filter
    .
    You can filter the devices displayed in the push scope by applying filters. Applying filters impacts only which firewalls or Prisma Access deployments are displayed in the push scope and has no impact on which devices you push to.
  5. Edit the Push Scope.
    Editing the push scope allows you to push targeted configuration changes to some or all of your firewalls or Prisma Access deployments.
    Performing a partial configuration push is not supported and you must push the entire
    Strata Cloud Manager
    configuration if you:
    • Configure a new tenant and this is your first configuration push.
    • Onboard a firewall to
      Strata Cloud Manager
      .
    • Onboard a Prisma Access mobile users and remote users.
    • Rename or move a folder so that it’s nested under a different folder.
    • [
    • Move a firewall to a different folder.
    • Rename, associate, or disassociate a snippet.
    • Load a configuration.
    • Revert the configuration to the last pushed configuration or to a previous configuration version snapshot.
    • Admin Scope
      — Select which administrator configuration changes to include in the push. By default, admin scope selects the current user, and changes made by that user are pushed to the selected firewalls or Prisma Access deployments. Selecting changes
      Changes from all admins
      includes all configuration changes made by all administrators.
      Editing the admin scope to select specific administrators includes all the configuration changes made by the selected administrators. This option can't be used when performing your first config push. Selecting specific configuration changes to include in the push is not supported.
    • Push Scope
      — Select the deployment types or folders you want to push to. When you select a deployment or folder, the configuration changes are pushed to all firewalls or deployments.
      When you select a folder that contains child folders, all child folders and the associated firewalls or Prisma Access deployments are included in the push. Selecting a specific firewall or a Prisma Access deployment automatically selects the folder it’s associated with.
  6. Push Config
    and
    Push
    .
    Review the push targets and
    Push
    .
In the event a configuration is pushed in error, or a change causes network or security disruption, you can revert your Prisma Access configuration.

View Prisma Access Jobs

You can view the
Jobs
history on Prisma Access to display details about operations that admins initiated, as well as automatic content and license updates. This includes any configuration commits, pushes and reverts. You can use the Jobs view to troubleshoot failed operations, investigate warnings associated with completed commits, or cancel pending commits.
  1. On the top menu bar, select
    Push Config
    and view the Prisma Access
    Jobs
    .
  2. Perform any of the following tasks:
    • Investigate warnings or failures
      —Read the entries in the Summary column for warning or failure details.
    • View a commit description
      —If an administrator entered a commit description, you can refer to the Description column to understand the purpose of the commit.
    • Check the position of an operation in the queue
      —View the operation position and status to determine the position of the operation.

Recommended For You