Commit-All

To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and configuration to Log Collectors and firewalls using templates or template stacks.
Commit Type
API Request
Pre-commit policy validation.
https://
<panorama>
/api/?type=commit&action=all&cmd= <commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>
Specific Device group commit.
https://
<panorama>
/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="
<device-group-name>
"/></device-group></shared-policy></commit-all>
Virtual system (vsys) commit.
https://
<panorama>
/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="
<device-group-name>
"/><devices><entry name="
<serial_number>
"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>
Specific firewall commit.
https://
<panorama>
/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="
<device-group-name>
"><devices><entry name="
<serial_number>
"></devices></entry></device-group></shared-policy></commit-all>
Use the API Browser to find other options available for granular commit operations on Panorama. In the
cmd
parameter, you must replace the XML element for the corresponding
commit-all
operation.

Recommended For You