Which option describes the operation of the automatic commit recovery feature?
Which option describes the operation of the automatic commit recovery feature?
The automatic commit recovery feature allows a firewall to revert to the previous configuration if a commit causes high-availability (HA) partner connectivity failure. This is a crucial measure to ensure continuous communication and functionality between HA pairs, which is vital for maintaining network resiliency and uptime.
D It was a feature released since 9.1 with a slighty different name. PAN-OS 10.0 https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/administer-panorama/enable-automated-commit-recovery.html PAN-OS 9.1 https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/panorama-features/automatic-panorama-connection-recovery
D https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/administer-panorama/enable-automated-commit-recovery.html
D https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/administer-panorama/enable-automated-commit-recovery
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/administer-panorama/enable-automated-commit-recovery
After checking on our lab we confirmed that as soon as a new config breaks communication between Panorama and one of the FWs, it reverts to the previous config.
D is correct
Panorama connectivity failure leads to reverting config
To ensure that broken configurations caused by configuration changes pushed from the Panorama™ management server to managed firewalls, or committed locally on the firewall, enable Automated Commit Recovery to enable managed firewalls to test configuration changes for each commit and to verify that the changes did not break the connection between Panorama and the managed firewall.
It's D - all the answers are related to..." firewall to revert..." and the link in the answer refers to 'Connection Recovery' not, -> Firewall Commit Recovery... Process of elimination here.