Why is the "content preview" seen during "preview changes" or "Config Audit"?
7993
Created On 09/28/23 08:44 AM - Last Modified 05/29/24 19:33 PM
Question
Why is "config audit" displaying "content-preview" attributes before commit?
Details:
- When checking the "Config Audit" some "Content Preview" changes are visible
- This is seen under Panorama > Config Audit (For Panorama) or Device > Config Audit (For Firewall)
- These are not seen after commit.
=========================
<content-preview>
<application/>
<application-type>
<category/>
<technology/>
</application-type>
</content-preview>
=========================
Environment
- Any Panorama or Firewall
- Supported PAN-OS
- Config Audit or preview changes
Answer
- Content-preview provides information about New App-ID and Modified App-ID.
- When the content of App-ID is downloaded, running-config.xml will immediately import it.
- One can enable/disable new APP-IDs prior to the installation of content using App-IDs in the action column under "Applications and Threats".
- If a new App-id is downloaded but not yet installed on the device, "content-preview" will show the App-id.
- The "content-preview" disappears if the downloaded app-id is applied or removed.
- On the Device> Dynamic Updates on Web GUI, one may examine information about content previews. "Review Apps" is shown in the action column under "Applications and Threats".
Additional Information
Enable or disable App-IDs manually.