How to override panorama pushed template configuration on the local firewall

Objective

How to override panorama pushed template configuration on the local firewall.

Environment

• Palo Alto Firewall.

• PAN-OS 8.1 and above.

• Template configuration.

Procedure

When a firewall is being managed by Panorama, any changes to the configuration done using panorama must be modified from Panorama itself. In case the configuration needs to be modified locally on firewall it can be done using the following procedure.

Example below indicates the firewall interfaces being configured from Panorama using template stack named PA-VM-196_stack. We are modifying the ethernet 1/1 configuration on firewall.

1. Go to the desired configuration tab on the Firewall. In this example Network > Ethernet > ethernet1/1

2. Select the required interface. In this example ethernet 1/1.

3. On the bottom, click on the override button.

4. Now the popup window appears where you can modify the configuration and commit .