Palo Alto Firewall Training | Panorama Templates

Understanding the templates and template stacks in Panorama will make managing firewalls at scale much easier, this video goes into the template stack and looks at how the end configuration can be manipulated through templates to produce an consistent configuration across your estate and to provide an easy accurate way of applying those standard configurations to firewalls as well as a way of customising standard configurations but with local variations in IP address for instance.
If you found this or any video helpful please leave a like as it really helps! thank you.
#paloaltotraining #paloaltofirewall #paloaltofirewalltraining #paloaltopanorama #paloaltotroubleshooting #mode44

[@bx1803]

I truly belive this is the best quickest to the point panorama managed video I have ever seen.. I have been managing firewalls with Panorama for a few years now and have learned just from this video that its actually a good thing to have the auto commit recovery selected and that local overrides wont necessarily kill the connection to panorama/ make the device unmanageable... thank so much for this video!

[@mode4480]

Thank you for watching ! I am happy the video helped, hopefully the next video on device groups will be uploaded soon as well.

[@bx1803]

@@mode4480 Thank you very much, very clear and straight to the point, they are great videos! I was searching for more material on Panorama variables so that I can use it for my AWS Transit Gateway GWLB Centralized Design with two standalone vm series firewalls

[@TomWhi]

This is a brilliantly well described video. I'm new to Palo and Panorama so having resources like these are very important to me, I'll look forward to trying this out in my own lab now i've got more of an understanding where to start. I've already bookmarked my next video to watch and subscribed to learn more. Thanks again.

[@mode4480]

Hi
Thank you for the awesome comment! I hope my other videos help too.

[@MrNameless0shelter]

I think I won't force overwrite anything after I imported all firewalls settings, will only use Panorama Template to push out new configs, and change existing template config on Firewalls themselves. Thanks for the video..

[@mode4480]

That is perfectly valid too, just remember that all local settings will remain on the firewall, so when you have two or three firewalls that is OK because when you need to make a change you can go to each individual firewall, when you have 2 or 3 hundred firewalls you will have to remember which firewalls have overridden values and which are using template values, if you force back the values you imported they are the values that are on the firewall.
However some places do not even use templates and stacks, preferring, as you say to keep those settings local and simply use device groups to ensure consistent policy and objects across the firewall estate.
Thank you for watching.