You can use firewall-specific variables to override variables pushed to the managed firewall from a template or template stack to create firewall-specific configurations. This allows you to manage the base template or template stack configuration while maintaining any firewall-specific configurations that do not apply to other firewalls—all from Panorama™. This allows you to leverage the management capabilities of Panorama while accounting for any specific configurations required for individual firewalls. In this example, the Primary DNS server IP address variable called

$DNS

that has been pushed from a template will be overridden to create a firewall-specific variable.