While Templates and Template Stacks enable you to apply a base configuration to multiple firewalls, you might want to configure firewall-specific settings that don’t apply to all the firewalls in a template or template stack. Overrides allow for exceptions or modifications to meet your deployment needs. For example, if you use a template to create a base configuration but a few firewalls in a test lab environment need different settings for the Domain Name System (DNS) server IP address or the Network Time Protocol (NTP) server, you can override the template settings.
If you want to disable or remove all the template or stack settings on a firewall instead of overriding a single setting, see Disable/Remove Template Settings.
Override a Template Setting
Access the web interface of the firewall. Directly access the firewall by entering its IP address in the URL field of your browser, or use the Context drop-down in Panorama to switch to the firewall context.
Navigate to the setting you will override. In this example, you will override the DNS server IP address that you assigned using a template in Add a Template. Select Device > Setup > Services > Global and edit the Services section. Click the template icon (green cog) for the Primary DNS Server to enable overrides for that field. Enter a new IP address for the Primary DNS Server. Note that the dialog now displays a template override icon (orange-overlapping-green cogs) to indicate that the value is overridden. Click OK and Commit.

Related Documentation