An administrator notices that an interface configuration has been overridden locally on a firewall. They require all configuration to be managed from Panorama and overrides are not allowed. What is…

Question

Options

• AReload the running configuration and perform a Firewall local commit.
• BPerform a commit force from the CLI of the firewall.
• CPerform a template commit push from Panorama using the "Force Template Values" option.
• DPerform a device-group commit push from Panorama using the "Include Device and Network

• A
  3% (1)
• B
  12% (4)
• C
  82% (28)
• D
  3% (1)

Explanation

When a firewall administrator locally overrides a value that was originally pushed from a Panorama template, that local override takes precedence over future template pushes by default. To restore centralized control and eliminate local overrides, the administrator must push the template from Panorama and select the 'Force Template Values' option. This option instructs Panorama to overwrite any locally modified (overridden) settings with the authoritative values defined in the template, regardless of what is set locally on the firewall. A local commit (A) would not fix the override. A 'commit force' from the CLI (B) commits the local candidate config but does not remove overrides. A device-group push (D) applies policies/objects but not interface/network template settings.

No community discussion yet for this question.