To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and configuration to the firewalls using templates or template stacks.
Commit Type API Request
Pre-commit policy validation. https://panorama/api/?type=commit&action=all&cmd= <commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>
Device group commit. https://panorama/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry%20name="device-group-name"/></device-group></shared-policy></commit-all>
VSYS commit. https://panorama/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry%20name="device-group-name"/><devices><entry%20name="serial_number"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>
Specific firewall commit. https://panorama/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry%20name="device-group-name"><devices><entry%20name="serial_number"></devices><entry/></device-group></shared-policy></commit-all>
Use the API Browser to find other options available for granular commit operations on Panorama. In the cmd parameter, you must replace the XML element for the corresponding commit-all operation.

Related Documentation