What do the different colors on gear icon indicate when a template configuration is pushed from panorama?
39604
Created On 09/04/19 02:09 AM - Last Modified 09/07/19 02:29 AM
Question
What is the meaning of different colors on gear icon when template configuration pushed from panorama to a managed firewall?
Environment
- Palo Alto Firewalls.
- Template configuration.
Answer
When a firewall is being managed by Panorama, gear icon appears next to the configuration. The color on the gear indicate if the values are pushed using Force Template Values or if they are overwritten locally.
Example below indicates the firewall interfaces being configured from Panorama using template stack named PA-VM-196_stack.
GUI: Network > Ethernet > ethernet1/1
Solid green gear icon indicates that Force Template Values option was used on Panorama during template push operation.
Example below indicates the firewall interfaces being configured from Panorama using template stack named PA-VM-196_stack.
GUI: Network > Ethernet > ethernet1/8
Orange overlay green gear icon indicates panorama pushed configuration was overwritten on the local firewall or the Force Template Values was not selected during panorama commit push operation.
Additional Information
Note 1: To override any template configuration refer to the the article How to Override Template Values
Note 2: Using Force Template Values on Panorama causes the Network and Object values on firewall to be overwritten by the Panorama pushed configuration. Please use caution while using this option.