Selective Commit of Configuration Changes
Table of Contents
10.2
Expand all | Collapse all
-
- CN-Series Firewall as a Kubernetes CNF
- High Availability Support for CN-Series Firewall as a Kubernetes CNF
- High Availability Support for CN-Series Firewall on AWS EKS
- DPDK Support for CN-Series Firewall
- Daemonset(vWire) IPv6 Support
- Panorama Plugin for Kubernetes 3.0.0
- L3 IPV4 Support for CN-Series
- 47 Dataplane Cores Support for VM-Series and CN-Series Firewalls
- Memory Scaling of the VM-Series Firewall
Selective Commit of Configuration Changes
Select and commit configuration objects in PAN-OS.
To allow for greater control of configuration changes, PAN-OS 10.2 enables you to specify which
administrator configuration changes to include in a commit and allows you select
individual configuration objects. Leveraging selective commit allows you to maintain
your defined operational procedure while still being able to successfully make
independent configuration changes not defined in your operational scope. This helps
mitigate and avoid potential outages and configuration related issues that could
cause network disruptions.
- Log in to the firewall web interface.Make any configuration changes as needed.Perform a selective commit.
- Select Commit CommitCommit to Panorama and select Commit Changes Made By to commit only your own configuration changes.(Panorama managed firewalls) On Panorama, select CommitCommit to Panorama. Additionally, the Commit and Push operation is also supported and allows you to make the same object level configuration selections to commit.(Optional) Click the admin in displayed next to the Commit Changes Made By field to modify the Admin Scope and include configuration changes made by other admins in the commit.Expand the list of configuration changes to review.In the Include in Commit column, uncheck (clear) a configuration object to not include in the commit.All configuration changes made by admins in the Admin Scope are included by default.Commit.(Panorama managed firewalls only) Perform an Administrator-Level Push.