How does the selective push work on Panorama?
363
Created On 08/14/25 08:45 AM - Last Modified 12/23/25 04:01 AM
Question
How does the selective push work on Panorama?
Environment
- Panorama
- Supported PAN-OS
- Config push from Panorama to managed Firewalls
Answer
- When a user initiates a selective push to the device, last in-sync config of the Device Group/Template which is included in selective push is pulled.
- New changes are fetched based on selected filters like admin user.
- These changes are applied on top of the last in-sync configuration along with shared optimization and then pushed to the device.
- The Pending selective push changes can be viewed using the cli command "> show config push-scope"