20
•
Panorama
6.1
Administrator’s
Guide
©
Palo
Alto
Networks,
Inc.
Panorama
Commit
Operations
Panorama
Overview
Panorama
Commit
Operations
When
editing
the
configuration
on
Panorama,
you
are
changing
the
candidate
configuration
file.
The
candidate
configuration
is
a
copy
of
the
running
configuration
along
with
any
changes
you
made
since
the
last
commit.
The
Panorama
web
interface
displays
all
the
configuration
changes
immediately.
However,
Panorama
won’t
implement
the
changes
until
you
commit
them.
The
commit
process
validates
the
changes
in
the
candidate
configuration
file
and
saves
it
as
the
running
configuration
on
Panorama.
When
initiating
a
commit
on
Panorama,
select
one
of
the
following
types:
When
you
perform
a
commit,
Panorama
pushes
the
entire
configuration
to
the
managed
firewalls.
When
the
commit
completes,
a
result
displays:
Commit succeeded
or
Commit succeeded with warnings
.
Some
other
commit
choices
are:
Preview Changes
—This
option
is
available
when
the
Commit Type
is
Panorama
.
It
enables
you
to
compare
the
candidate
configuration
with
the
running
configuration
in
the
same
way
as
the
Panorama > Config Audit
feature
(see
).
After
clicking
Preview Changes
,
select
the
number
of
lines
to
include
for
context,
and
click
OK
.
As
a
best
practice,
preview
your
configuration
changes
before
committing
them.
Include Device and Network Templates
—This
option
is
available
when
committing
a
device
group
from
Panorama.
It
allows
you
to
commit
both
device
group
and
template
changes,
to
the
pertinent
firewalls,
in
a
single
commit
operation.
If
you
prefer
to
commit
your
changes
as
separate
commit
operations,
do
not
select
this
check
box.
After
any
system
event
or
administrator
action
causes
Panorama
to
reboot,
all
your
changes
since
the
last
commit
will
be
lost.
To
preserve
changes
without
committing
them,
periodically
click
Save
at
the
top
right
of
the
web
interface
to
save
a
snapshot
of
the
candidate
configuration.
If
a
reboot
occurs,
you
can
then
revert
to
the
snapshot.
For
details
on
backing
up
and
restoring
running
and
candidate
configurations,
see
Commit
Options
Description
Panorama
Commits
the
changes
on
the
current
candidate
configuration
to
the
running
configuration
on
Panorama.
You
must
first
commit
your
changes
on
Panorama,
before
committing
any
configuration
updates
(templates
or
device
groups)
to
the
managed
firewalls
or
Collector
Groups.
Template
Commits
network
and
device
configurations
from
a
Panorama
template
to
the
selected
firewalls.
Device Group
Commits
policies
and
objects
configured
from
Panorama
to
the
selected
firewalls/virtual
systems.
Collector Group
Commits
changes
to
the
specified
Collector
Groups
that
Panorama
manages.
Because
the
preview
results
display
in
a
new
window,
your
browser
must
allow
pop
‐
up
windows.
If
the
preview
window
does
not
open,
refer
to
your
browser
documentation
for
the
steps
to
unblock
pop
‐
up
windows.
