Can Panorama pushed policies and objects be modified or override locally on the firewall?

Can Panorama pushed policies and objects be modified or override locally on the firewall?

3150
Created On 08/14/23 14:49 PM - Last Modified 02/27/24 22:16 PM


Question


Can Panorama-pushed policies and objects be modified or overridden locally on the firewall?

Environment


  • Panorama managed Firewalls
  • Supported PANOS
  • Device group config

Answer


  1. No. Panorama-pushed policies and objects cannot be modified or overridden locally on the firewall.
  2. They can only be edited on Panorama.
  3. There is no option to override panorama-pushed policies or objects on the firewall.
  4. Override of Network/Template values is permitted on the firewall.

Additional Information


An option on the local firewall is to clone the pushed policy/object and make a local copy on the firewall which can be modified.
 
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g23UCAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail