Focus

Panorama Administrator's Guide

Commit Selective Configuration Changes for Managed Devices

Table of Contents

Commit Selective Configuration Changes for Managed Devices

Selectively commit configuration objects made by one or more Panorama™ administrators.

On the Panorama™ management server, configuration changes occur often and are typically made by multiple administrators who are not aware of what other configuration changes were made on Panorama. It is vital to be able to control which configuration objects are committed to Panorama and prevent incomplete configurations from being pushed from Panorama to your managed firewalls. Rather than committing all pending configuration changes to Panorama, you can instead select specific device group and template stack objects to commit. A system log is generated after a successful selective commit.

The ability to select specific objects to commit allows multiple administrators to effectively make configuration changes without disrupting other administrators who make configuration changes that are not ready to be committed. Leveraging the ability to selectively commit configuration changes to Panorama allows you to maintain your defined operational procedure while still being able to successfully make independent configuration changes that are not defined within your operational scope.

Log in to the Panorama Web Interface.
Perform device group and template stack configuration changes on Panorama.
Commit and Commit to Panorama.
Change the commit scope to Commit Changes Made By to select specific device group and template stack configuration changes to commit to Panorama.
The push scope displays the name of the admin currently logged in. Click the admin name to view a list of admins who have made configuration changes that have not been committed to Panorama.
In the Include in Commit column, check (enable) the configuration objects you want to include in the commit.
(Optional) Preview and validate your pending configuration changes to ensure you want to commit the selective configuration changes to Panorama.
Commit.
The Commit Status page displays the administrators that made configuration changes that were committed and the location of the committed configuration changes.
Push Selective Configuration Changes to Managed Devices.
After you commit the selected configuration objects to Panorama, you can push those configuration objects to your managed firewalls.

Preview, Validate, or Commit Configuration Changes

Push Selective Configuration Changes to Managed Devices