Palo Alto Networks Knowledgebase: Panorama Commit Error: Template Configuration Administratively Disabled

Panorama Commit Error: Template Configuration Administratively Disabled

5569
Created On 02/07/19 23:46 PM - Last Updated 02/07/19 23:46 PM
Policy
Resolution

Issue

When the user commits templates from Panorama to the firewall, the following error is encountered:

 

Template configuration administratively disabled


Cause

When managing a Palo Alto Networks firewall with Panorama, it is recommended to commit Panorama templates to the device first. This will ensure the existing Panorama policies will work on the newly upgraded firewall. If you receive the above message, this means that templates have not been enabled yet.

 

 

Resolution

If the user receives this error, enter the Panorama WebGUI and enable Panorama templates:

  1. Go to Device > Setup > Management > Panorama Settings
  2. Click the "Enable Device and Network Template" button and click OK.
    templates-disabled.PNG.png
    Then, click OK on the confirmation window. No commit is needed.
    templates-disabled-2.PNG.png
  3. From Panorama, commit templates to the firewall
  4. Once this is complete, all of the templates will have been updated
  5. Proceed with the normal policy commit from Panorama

 

From CLI

Note: The Device and Network Template can also be enabled on the CLI:

> set system setting template enable

 

owner: jdelio



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClrRCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language