This section provides comprehensive guidance on how to administer and maintain the Panorama management server to ensure operational efficiency and secure configuration management. Administrators can safely manage system configurations by previewing changes before they are applied, validating candidate configurations to prevent errors, and performing both global and selective commits to push changes to managed devices.

Selective configuration pushes ensure that only specific device group and template stack objects are committed, preventing incomplete configurations from impacting the network. To further protect configuration integrity, administrators can enable automated commit recovery, which allows managed firewalls to independently test new configuration changes and automatically revert to a previous working candidate configuration if the connection to Panorama is disrupted.

Additionally, you can safeguard your deployment by managing configuration backups, which allows you to save and export versions of the running or candidate configurations and load them onto firewalls when needed.

You can also compare different configuration versions to review a detailed summary or XML diff of changes, and use configuration locks to restrict modifications and prevent concurrent overrides from other administrators. Routine operational maintenance involves utilizing the Panorama Task Manager to track, troubleshoot, and monitor the status of initiated operations, such as scheduled report generation or commit jobs. Administrative access can be secured by enforcing strict password profiles and complexity requirements across all passwords, and the environment can be personalized by adding custom logos.

For instructions on completing initial setup, including defining network access settings, licensing, upgrading the Panorama software version, and setting up administrative access to Panorama, see Set Up Panorama.