See the following topics for options to modify existing objects:
Move or Clone an Object
When moving or cloning objects, you can assign a Destination (a virtual system on a firewall or a device group on Panorama) for which you have access permissions, including the Shared location.
To move an object, select the object in the Objects tab, click Move, select Move to other vsys (firewall only) or Move to other device group (Panorama only), complete the fields in the following table, and then click OK.
To clone an object, select the object in the Objects tab, click Clone, complete the fields in the following table, and then click OK.
Move/Clone Setting Description
Selected Objects Displays the Name and current Location (virtual system or device group) of the policies or objects you selected for the operation.
Destination Select the new location for the policy or object (a virtual system, device group, or Shared). The default value is the Virtual System or Device Group that you selected in the Policies or Objects tab.
Error out on first detected error in validation Select this option (selected by default) to make the firewall or Panorama display the first error it finds and stop checking for more errors. For example, an error occurs if the Destination doesn’t include an object that is referenced in the policy rule you are moving. If you clear this selection, the firewall or Panorama will find all errors before displaying them.
Override or Revert an Object
In Panorama, you can nest device groups in a tree hierarchy of up to four levels. At the bottom level, a device group can have parent, grandparent, and great-grandparent device groups at successively higher levels—collectively called ancestors—from which the bottom-level device group inherits policies and objects. At the top level, a device group can have child, grandchild, and great-grandchild device groups—collectively called descendants. You can override an object in a descendant so that its values differ from those in an ancestor. This override capability is enabled by default. However, you cannot override shared or default (preconfigured) objects. The web interface displays the icon to indicate an object has inherited values and displays the icon to indicate an inherited object has overridden values.
Override an object —Select the Objects tab, select the descendant Device Group that will have the overridden version, select the object, click Override, and edit the settings. You cannot override Name or Shared settings for an object. Revert an overridden object to its inherited values —Select the Objects tab, select the Device Group that has the overridden version, select the object, click Revert, and click Yes to confirm the operation. Disable overrides for an object —Select the Objects tab, select the Device Group where the object resides, click the object Name to edit it, select Disable override, and click OK. Overrides for that object are then disabled in all descendants of the selected Device Group. Replace all object overrides across Panorama with the values inherited from the Shared location or ancestor device groups —Select Panorama > Setup > Management, edit the Panorama Settings, select Ancestor Objects Take Precedence, and click OK. You must then commit to Panorama and to the device groups containing overrides to push the inherited values.

Related Documentation