Commit configuration changes to your policy rulebase reordering on the Panorama
management server.
The Panorama management server running PAN-OS 11.0.1 enables Panorama admin to commit
or revert their own policy rulebase reordering configuration changes. This enables
and supports concurrent Panorama admins making policy reordering changes and does
not require you to commit or revert all configuration changes on Panorama when
policy rulebase reordering is required. Additionally, this allows you to accurately
track and audit policy rulebase reordering changes made by each individual admin.
Admin-level commit and revert of policy reordering changes is supported when adding
a new policy rule between existing rules, moving and reordering existing policy
rules, and deleting an existing policy rule. A configuration log is generated when
an admin-level commit or revert for a policy rulebase reordering is performed.
When you
preview your configuration commit, a
policy rule added between existing policy rules is displayed as a modified
configuration object rather than an added configuration object. For example,
Policy1 and
Policy2
are existing policy rules. A Panorama admin later creates
Policy3 and adds the policy rule between
Policy1 and
Policy2.
When the Panorama admin goes to preview the configuration changes,
Policy3 is displayed as a modified configuration
object.
Panorama must be running PAN-OS 11.0.1 to perform an admin-level commit when a policy
rulebase is reordered and then push the change to managed firewalls.
