>
    Strata Copilot
    Add a Template
    Focus
    Download PDF
    Focus
    1. Home
    2. Panorama
    3. Manage Firewalls with Panorama
    4. Manage Templates and Template Stacks
    5. Add a Template
    Download PDF
    Panorama

    Add a Template

    Table of Contents

    Add a Template

    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama)
    • Device management license
    You must add at least one template before Panorama™ displays the Device and Network tabs required to define the network setup and device configuration elements for firewalls. Panorama supports up to 1,024 templates. Every managed firewall must belong to a template stack. While templates contain managed device configurations, template stacks allow you to manage and push the template configurations to all managed firewalls assigned to the template stack.
    Combine templates in to a template stack to avoid duplicating many configurations among templates (see Templates and Template Stacks and Configure a Template Stack).
    1. Add a template.
      1. Select PanoramaTemplates.
      2. Click Add and enter a unique Name to identify the template.
      3. (Optional) Enter a Description for the template.
      4. Click OK to save the template.
      5. If the template has a virtual system (vsys) with configurations (for example, interfaces) that you want Panorama to push to firewalls that don’t have virtual systems, select the template you created, select the vsys from the Default VSYS drop-down and click OK.
      6. Select CommitCommit and Push and then Commit and Push your changes to the Panorama configuration and to the template.
    2. Verify that the template is available.
      After you add the first template, Panorama displays the Device and Network tabs. These tabs display a Template drop-down. Check that the drop-down displays the template you just added.
    3. Configure a Template Stack and add the template to the template stack.
    4. Use the template to push a configuration change to firewalls.
      Renaming a vsys is allowed only on the local firewall, not on Panorama the result is an entirely new vsys or the new vsys name gets mapped to the wrong vsys on the firewall.
      For example, define a primary Domain Name System (DNS) server for the firewalls in the template.
      You can also Configure a Template or Template Stack Variable to push device-specific values to managed devices.
      1. In the Device tab, select the Template from the drop-down.
      2. Select DeviceSetupServicesGlobal, and edit the Services section.
      3. Enter an IP address for the Primary DNS Server.
      4. Select CommitCommit and Push and then Commit and Push your changes to the Panorama configuration and to the template.
    5. Verify that the firewall is configured with the template settings that you pushed from Panorama.
      1. In the Context drop-down, select one of the firewalls to which you pushed the template setting.
      2. Select DeviceSetupServicesGlobal. The IP address that you pushed from the template appears. The Services section header displays a template icon (
        ) to indicate that settings in the section have values pushed from a template.
    6. Troubleshoot Connectivity to Network Resources to verify your firewalls can access your network resources.

    © 2026 Palo Alto Networks, Inc. All rights reserved.