at the top right of the firewall or Panorama web interface to undo changes made to the candidate configuration since the last commit. Reverting changes restores the settings to the values of the running configuration. You can filter which configuration changes to revert based on administrator or
location. The location can be specific virtual systems, shared policies and objects, or shared device and network settings.
You cannot revert changes until the firewall or Panorama finishes processing all commits that are pending or in progress. After you initiate the revert process, the firewall or Panorama automatically locks the candidate and running configurations so that other administrators cannot edit settings or commit changes. After completing the revert process, the firewall or Panorama automatically removes the lock.
The Revert Changes dialog displays the options described in the following table:
Revert All Changes
Reverts all changes for which you have administrative privileges (default). You cannot manually filter the scope of the configuration changes that the firewall reverts when you select this option. Instead, the administrator role assigned to the account you used to log in determines the revert scope:
In Admin Role profiles, the privileges for committing also apply to reverting.
If you implemented access domains, the firewall automatically applies those domains to filter the revert scope (see Device > Access Domain). Regardless of your administrative role, the firewall reverts only the configuration changes in the access domains assigned to your account.
Revert Changes Made By
Filters the scope of configuration changes that the firewall reverts. The administrative role assigned to the account you used to log in determines your filtering options:
Filter the revert scope as follows:
If you have implemented access domains, the firewall automatically filters the revert scope based on those domains (see Device > Access Domain). Regardless of your administrative role and your filtering choices, the revert scope includes only the configuration changes in the access domains assigned to your account.
This column categorizes the locations where the changes were made:
Include in Revert
Partial revert only)
Enables you to select the changes you want to revert. By default, all changes within the
Revert Scopeare selected. This column displays only after you choose to
Revert Changes Made Byspecific administrators.
There might be dependencies that affect the changes you include in a revert. For example, if you add an object and another administrator then edits that object, you cannot revert your change without also reverting the change for the other administrator.
Group by Location Type
Lists the configuration changes in the
Enables you to compare the configurations you selected in the
Revert Scopeto the running configuration. The preview window uses color coding to indicate which changes are additions (green), modifications (yellow), or deletions (red).
To help you match the changes to sections of the web interface, you can configure the preview window to display
Lines of Contextbefore and after each change. These lines are from the files of the candidate and running configurations that you are comparing.
Because the preview results display in a new window, your browser must allow pop-up windows. If the preview window does not open, refer to your browser documentation for the steps to unblock pop-up windows.
Lists the individual settings for which you are reverting changes. The
Change Summarylist displays the following information for each setting:
Optionally, you can
Group Bycolumn name (such as
Reverts the selected changes.