Focus

PAN-OS® and Panorama™API Usage Guide

Commit-All

Table of Contents

Commit-All

To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and configuration to Log Collectors and firewalls using templates or template stacks.

When you make a configuration change to a parent device group, only the Panorama web interface supports pushing these changes to managed firewalls associated with its child device groups. Panorama XML API pushes device group configuration changes only to managed firewalls directly associated with the impacted device group. Panorama does not automatically push the changes to any managed firewalls associated with its child device groups.

Commit Type	API Request
Pre-commit policy validation.	curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>"
Specific device group commit.	curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
Specific device group commit without including default device/network template changes.	curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><include-template>no</include-template><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
Virtual system (vsys) commit.	curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/><devices><entry name="<serial_number>"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>"
Specific firewall commit.	curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></devices></entry></device-group></shared-policy></commit-all>"

Use the API Browser to find other options available for granular commit operations on Panorama. In thecmd parameter, you must replace the XML element for the correspondingcommit-all operation.

Commit

Run Operational Mode Commands (API)