When overriding a template configuration locally on a firewall, what should you consider?

Question

Options

• AOnly Panorama can revert the override
• BPanorama will lose visibility into the overridden configuration
• CPanorama will update the template with the overridden value
• DThe firewall template will show that it is out of sync within Panorama

• A
  3% (1)
• B
  87% (26)
• C
  3% (1)
• D
  7% (2)

Explanation

When an administrator locally overrides a Panorama template setting directly on a managed firewall, Panorama loses visibility into the actual running value of that specific configuration element on that device. The firewall accepts the local override and ignores Panorama's template value for that setting, but Panorama's template retains its own value and has no awareness of what the firewall is actually running. Panorama does not adopt the overridden value into its template, and both Panorama and local admins (not just Panorama) can revert the override. While the device may appear out of sync, the critical operational concern is that centralized visibility and management of that setting is lost.

No community discussion yet for this question.