Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 248

A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended.
The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings.
What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

Answer options

• A. Move the "Local" template above the "Global" template in the template stack.
• B. Perform a commit and push with the "Force Template Values" option selected.
• C. Override the values on the local firewall and apply the correct settings for each value.
• D. Move the "Global" template above the "Local" template in the template stack.

Correct answer: A

Explanation

To ensure that the settings from the 'Local' template take precedence, it is essential to position it above the 'Global' template in the stack. The other options either do not address the hierarchy issue or involve manual overrides that could lead to configuration inconsistencies.