What do the different colors on gear icon indicate when a template configuration is pushed from panorama?
Question
What is the meaning of different colors on gear icon when template configuration pushed from panorama to a managed firewall?
Environment
- Palo Alto Firewalls.
- Template configuration.
Answer
When a firewall is being managed by Panorama, gear icon appears next to the configuration. The color on the gear indicate if the values are pushed using Force Template Values or if they are overwritten locally.
Example below indicates the firewall interfaces being configured from Panorama using template stack named PA-VM-196_stack.
GUI:
Network > Ethernet > ethernet1/1
Solid green gear icon indicates that
Force Template Values
option was used on Panorama during template push operation.
Example below indicates the firewall interfaces being configured from Panorama using template stack named PA-VM-196_stack.
GUI:
Network > Ethernet > ethernet1/8
Orange overlay green gear icon indicates Panorama pushed configuration was
overwritten
on the local firewall or the
Force Template Values
was not selected during Panorama
commit push
operation.
Additional Information
Note 1: To override any template configuration refer to the article How to Override Template Values
Note 2: Using Force Template Values on Panorama causes the Network and Object values on firewall to be overwritten by the Panorama pushed configuration. Please use caution while using this option.
