Scribd
Upload
48 views

Device Group Push to a Multi-VSYS Firewall

The document provides guidance on managing device group configuration changes pushed from the Panorama management server to multi-VSYS firewalls. It explains how these changes are bundled into a single commit job to optimize completion time, and details the consequences of failures during the push process. This functionality is supported for multi-VSYS firewalls running PAN-OS 10.1 and later.

Uploaded by

bibist
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
48 views

Device Group Push to a Multi-VSYS Firewall

The document provides guidance on managing device group configuration changes pushed from the Panorama management server to multi-VSYS firewalls. It explains how these changes are bundled into a single commit job to optimize completion time, and details the consequences of failures during the push process. This functionality is supported for multi-VSYS firewalls running PAN-OS 10.1 and later.

Uploaded by

bibist
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

(/content/techdocs/en_US.

html)

Updated on Thu Mar 13 20:26:10 UTC 2025

Home (/) | Panorama (/content/techdocs/en_US/panorama.html)


| Panorama Administrator's Guide (/content/techdocs/en_US/panorama/10-1/panorama-admin.html)
| Manage Firewalls (/content/techdocs/en_US/panorama/10-1/panorama-admin/manage-firewalls.html)
| Manage Device Groups (/content/techdocs/en_US/panorama/10-1/panorama-admin/manage-firewalls/manage-device-groups.html)
| Device Group Push to a Multi-VSYS Firewall (/content/techdocs/en_US/panorama/10-1/panorama-admin/manage-firewalls/manage-
device-groups/device-group-push-to-a-multi-vsys-firewall.html)

DOWNLOAD PDF (/CONTENT/DAM/TECHDOCS/EN_US/PDF/PANORAMA/10-1/PANORAMA-ADMIN/PANORAMA-


ADMIN.PDF)

Panorama Administrator's Guide


(/content/techdocs/en_US/panorama/10-
1/panorama-admin.html)
Device Group Push to a Multi-VSYS Firewall

Table of Contents

Device group configuration changes pushed manually or from a scheduled configuration push
(/content/techdocs/en_US/panorama/10-1/panorama-admin/manage-firewalls/schedule-a-configuration-push-to-managed-
firewalls.html#id9cd088eb-b1c7-46e6-ba2f-ce2d7b60c7ac) of a device groups from the Panorama™ management server to
a multi-vsys (https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-
overview.html) firewall are automatically bundled into a single job. When a push is executed from Panorama to managed
firewalls, Panorama inspects the managed firewalls associated with the device group push. If Panorama detects that multiple
vsys belonging to the same multi-vsys firewall are associated with a device group push, it bundles the commit job for each
vsys into a single commit job on the managed firewall to reduce the overall commit job completion time.

If one of the bundled commit jobs fails, then the entire push fails and you need to push entire the device group configuration
changes from Panorama again. Additionally, if multiple multi-vsys firewalls are included in a push from Panorama and one
push fails, then the entire push fails to all firewalls included in the push from Panorama. When you monitor the device group
push (https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/use-the-web-
interface/manage-and-monitor-administrative-tasks.html) locally on the firewall, a single job is displayed rather than multiple
individual jobs. If any warnings are failures occur, an error description indicating the impacted vsys is displayed.

This functionality is supported for multi-vsys firewalls managed by Panorama running PAN-OS 10.1 and later releases by
default.

Was this information helpful?

Yes No

Previous
(/content/techdocs/en_US/panorama/10- Next (/content/techdocs/en_US/panorama/10-
Push a
Policy Rule 1/panorama-admin/manage- Manage 1/panorama-admin/manage-
to a Subset firewalls/manage-device-groups/push-a- the Rule
This site uses cookies essential to its operation, for analytics, and for personalized
firewalls/manage-device-groups/manage-the-
content and ads. By
of policy-rule-to-a-subset-of-firewalls.html) Hierarchy rule-hierarchy.html)
continuing to browse this site, you acknowledge the use of cookies. Privacy statement ❯ Cookie Settings
Firewalls
(https://www.paloaltonetworks.com/legal-notices/privacy)
Technical Documentation Co

Release Notes (/content/techdocs/en_US/release-notes.html) Abo


Search (/content/techdocs/en_US/search.html) Care
Blog (https://www.paloaltonetworks.com/blog/category/technical- Cus
documentation/) LIVE
Compatibility Matrix (/content/techdocs/en_US/compatibility- Kno
matrix.html)
OSS Listings (/content/techdocs/en_US/oss-listings.html)
Sitemap (/content/techdocs/en_US/sitemap.html)

(https://www.facebook.com/PaloAltoNetworks) (https://w
(https://www.youtube.com/channel/UCPRouchFt58TZnjoI65aelA)

(/content/techdocs/en_US.html) © 2025 Palo Alto Ne

This site uses cookies essential to its operation, for analytics, and for personalized content and ads. By
continuing to browse this site, you acknowledge the use of cookies. Privacy statement ❯
(https://www.paloaltonetworks.com/legal-notices/privacy)

You might also like