Focus
Focus
Table of Contents

Commit-All

To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and configuration to Log Collectors and firewalls using templates or template stacks.
Commit Type
API Request
Pre-commit policy validation.
curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>"
Specific device group commit.
curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
Specific device group commit without including default device/network template changes.
curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><include-template>no</include-template><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
Virtual system (vsys) commit.
curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/><devices><entry name="<serial_number>"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>"
Specific firewall commit.
curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></entry></devices></entry></device-group></shared-policy></commit-all>"
Use the API Browser to find other options available for granular commit operations on Panorama. In thecmd parameter, you must replace the XML element for the correspondingcommit-all operation.