How does the selective push work on Panorama?

How does the selective push work on Panorama?

604
Created On 08/14/25 08:45 AM - Last Modified 12/23/25 04:01 AM


Question


How does the selective push work on Panorama?



Environment


  • Panorama
  • Supported PAN-OS
  • Config push from Panorama to managed Firewalls


Answer


  1. When a user initiates a selective push to the device, last in-sync config of the Device Group/Template which is included in selective push is pulled.
  2. New changes are fetched based on selected filters like admin user.
  3. These changes are applied on top of the last in-sync configuration along with shared optimization and then pushed to the device.
  4. The Pending selective push changes can be viewed using the cli command "> show config push-scope"


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000fy3HKAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail