Select ConfigRevert Changes at the top right of the firewall or Panorama web interface to undo changes made to the candidate configuration since the last commit. Reverting changes restores the settings to the values of the running configuration. You can filter which configuration changes to revert based on administrator or location. The location can be specific virtual systems, shared policies and objects, or shared device and network settings.
You cannot revert changes until the firewall or Panorama finishes processing all commits that are pending or in progress. After you initiate the revert process, the firewall or Panorama automatically locks the candidate and running configurations so that other administrators cannot edit settings or commit changes. After completing the revert process, the firewall or Panorama automatically removes the lock.
The Revert Changes dialog displays the options described in the following table:
Revert All Changes
Reverts all changes for which you have administrative privileges (default). You cannot manually filter the scope of the configuration changes that the firewall reverts when you select this option. Instead, the administrator role assigned to the account you used to log in determines the revert scope:
In Admin Role profiles, the privileges for committing also apply to reverting.
If you implemented access domains, the firewall automatically applies those domains to filter the revert scope (see Device > Access Domain). Regardless of your administrative role, the firewall reverts only the configuration changes in the access domains assigned to your account.
Revert Changes Made By
Filters the scope of configuration changes that the firewall reverts. The administrative role assigned to the account you used to log in determines your filtering options:
Filter the revert scope as follows:
If you have implemented access domains, the firewall automatically filters the revert scope based on those domains (see Device > Access Domain). Regardless of your administrative role and your filtering choices, the revert scope includes only the configuration changes in the access domains assigned to your account.
Lists the locations that have changes to revert. Whether the list includes all changes or a subset of the changes depends on several factors, as described for the Revert All Changes and Revert Changes Made By options. The locations can be any of the following:
This column categorizes the locations where the changes were made:
Include in Revert
(Partial revert only)
Enables you to select the changes you want to revert. By default, all changes within the Revert Scope are selected. This column displays only after you choose to Revert Changes Made By specific administrators.
There might be dependencies that affect the changes you include in a revert. For example, if you add an object and another administrator then edits that object, you cannot revert your change without also reverting the change for the other administrator.
Group by Location Type
Lists the configuration changes in the Revert Scope by Location Type.
Enables you to compare the configurations you selected in the Revert Scope to the running configuration. The preview window uses color coding to indicate which changes are additions (green), modifications (yellow), or deletions (red).
To help you match the changes to sections of the web interface, you can configure the preview window to display Lines of Context before and after each change. These lines are from the files of the candidate and running configurations that you are comparing.
Because the preview results display in a new window, your browser must allow pop-up windows. If the preview window does not open, refer to your browser documentation for the steps to unblock pop-up windows.
Lists the individual settings for which you are reverting changes. The Change Summary list displays the following information for each setting:
Optionally, you can Group By column name (such as Type).
Reverts the selected changes.
Revert Firewall Configuration Changes
Revert Firewall Configuration Changes Revert operations replace settings in the current candidate configuration with settings from another configuration. Reverting changes is useful when you want ...
Save Candidate Configurations
Save Candidate Configurations Select Config Save Changes at the top right of the firewall or Panorama web interface to save a new snapshot file of ...
Revert Panorama Configuration Changes
Revert Panorama Configuration Changes When you revert changes, you are replacing settings in the current candidate configuration with settings from another configuration. Reverting changes is ...
Save and Export Firewall Configurations
Save and Export Firewall Configurations Saving a backup of the candidate configuration to persistent storage on the firewall enables you to later revert to that ...
Panorama Commit Operations
Panorama Commit Operations Click Commit at the top right of the web interface and select an operation for pending changes to the Panorama configuration and ...
Commit Changes Click Commit at the top right of the web interface and specify an operation for pending changes to the firewall configuration: commit (activate), ...
Save and Export Panorama and Firewall Configurations
Save and Export Panorama and Firewall Configurations Saving a backup of the candidate configuration to persistent storage on Panorama enables you to later restore that ...
Commit, Validate, and Preview Firewall Configuration Change...
Commit, Validate, and Preview Firewall Configuration Changes A commit is the process of activating pending changes to the firewall configuration. You can filter pending changes ...
Preview, Validate, or Commit Configuration Changes
Preview, Validate, or Commit Configuration Changes You can perform Panorama Commit, Validation, and Preview Operations on pending changes to the Panorama configuration and then push ...