>
    Commit-All
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. PAN-OS XML API Request Types and Actions
    4. Commit-All
    Download PDF
    Next-Generation Firewall

    Commit-All

    Table of Contents

    Commit-All

    To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and multiple configurations to Log Collectors and firewalls using templates or template stacks.
    When you make a configuration change to a parent device group, only the Panorama web interface supports pushing these changes to managed firewalls associated with its child device groups. Panorama XML API pushes device group configuration changes only to managed firewalls directly associated with the impacted device group. Panorama does not automatically push the changes to any managed firewalls associated with its child device groups.
    Consider creating device-group hierarchies that would enable you to automate your work flow using the XML API. You can view the diagram to see how Device group hierarchies can manage firewalls.
    The <device-group> tag is used to target the parent device group that you want to push the configuration to. Review the following example commands to familiarize yourself with the way Panorama reflects the PAN-OS API.bThe <commit-all> tag enables your operations to commit all changes.
    Commit Type
    API Request
    Pre-commit policy validation.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>"
    Specific device group commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
    Specific device group commit without including default device/network template changes.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><include-template>no</include-template><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
    Virtual system (vsys) commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/><devices><entry name="<serial_number>"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>"
    Specific firewall commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></devices></entry></device-group></shared-policy></commit-all>"
    Use the API Browser to find other options available for granular commit operations on Panorama. In thecmd parameter, you must replace the XML element for the correspondingcommit-all operation.

    © 2025 Palo Alto Networks, Inc. All rights reserved.