Schedule for Dynamic Updates on Panorama does Not Override Configured Schedule on Managed Device
46134
Created On 09/25/18 17:50 PM - Last Modified 11/16/19 02:34 AM
Symptom
The dynamic update schedule configuration (Device > Dynamic Updates) pushed from Panorama to the managed Palo Alto Networks firewall does not show up on the firewall. Instead, the managed device maintains the locally configured schedule for dynamic updates.
Environment
- Any Panorama.
- Palo Alto Firewall.
- PAN-OS 7.1 and above.
Cause
Locally defined dynamic updates setting on a managed Palo Alto Networks firewall take preference over the Panorama pushed setting.
Resolution
Additional Information
CLI command to set the update schedule on the firewall to None is listed below.
> configure
# delete deviceconfig system update-schedule
# commit force
# exit