Exam PCNSE All QuestionsBrowse all questions from this exam
Go to Exam
Question 319

A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended.

The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings.

What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

    Correct Answer: A

    To ensure that the settings in the 'Local' template are applied while maintaining settings from both templates, the 'Local' template should be moved above the 'Global' template in the template stack. In Panorama, templates that are higher in the template stack take precedence over those that are lower. By placing the 'Local' template above the 'Global' template, the settings from the 'Local' template will be prioritized and applied to the firewall.

Discussion
KuronekosamaOption: A

Skip to the end. Top takes priority in the template stack. https://m.youtube.com/watch?v=J40BJtuAf0w

confusionOption: A

A top template values get applied if you have the same values in bottom template

TAKUM1yOption: A

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

west33637Option: A

the answer should be A. Per this quote in your document link - "Panorama evaluates the templates listed in a stack configuration from top to bottom with higher templates having priority."

jam1234

is this even a good question? Ideally both global and local configs should not overlap, so that both global and local templates will get pushed to the FW (with global taking precedence). Admin should modify it this way, and not move the template above which may create more issue when another admin want to apply global policy to all FW.

bimyoOption: A

so help me understand this better. Does the template that is above (higher) in the GUI configuration take precedence over the lower one or is it the other way around. So does the the LOCAL template have to be above or underneath the GLOBAL one to take precedence. (answer here A or D , thanks! ) https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

homersimpson

Top one takes precedence, so LOCAL should be over GLOBAL. Thus, answer is A.