Persistent Uncommitted Changes on PAN-OS

Uncommitted changes on firewalls and the Panorama™ management server persist in the event of an unplanned restart.
In the event of an unforeseen restart of your firewall or Panorama™ management server, PAN-OS now preserves all uncommitted configuration changes locally until a commit executes successfully. An unforeseen restart can be of the PAN-OS device itself or of a PAN-OS management process related to configuration management. This helps eliminate the need to recreate configuration changes when an unforeseen restart occurs. By default, firewalls and Panorama maintain any uncommitted configuration changes on upgrade to PAN-OS 10.1.0 or later release and does not require you to configure or enable anything to leverage this functionality.
For firewalls or Panorama in a high availability (HA) configuration, the uncommitted configuration changes do not automatically sync across the HA peers in the event of an unforeseen restart. To sync uncommitted configuration changes to the firewall or Panorama HA peer, enter the following command:
admin>
request high availabilty sync-to-remote candidate-config
All uncommitted configuration changes on the firewall or Panorama are fully removed when you revert the running configuration. If you revert specific device group and template configuration on Panorama, only the uncommitted changes associated with the selected device groups and templates are removed.

Recommended For You