I guess the answer is A C and E
https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/template-capabilities-and-exceptions
From the link provided:
You can use Templates and Template Stacks to define a wide array of settings but you can perform the following tasks only locally on each managed firewall:
- Configure a device block list.
- Clear logs.
- Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode.
- Configure the IP addresses of firewalls in an HA pair.
- Configure a master key and diagnostics.
- Compare configuration files (Config Audit).
- Renaming a vsys on a multi-vsys firewall.
I have to disagree.
You _can’t_ rename a vsys
You _can’t_ change the Fw mgt ip
You _can’t_ change to FIPS mode, this is done by CLI using the serial cable and it wipes the whole config of the Fw back to defaults, not a small thing
You _can_ add administrator accounts.
You _can_ configure a device block list. This is in Device/Setup/Interfaces.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SergioJ
Highly Voted 1Â year agoMerlin0o
7Â months, 2Â weeks agoMarshpillowz
Most Recent 7Â months agoMetgatz
8Â months, 1Â week agohomersimpson
9Â months, 2Â weeks agoViriathus
8Â months, 1Â week agohomersimpson
4Â months, 1Â week agoskullomania
9Â months, 1Â week agoOmid2022
9Â months, 3Â weeks agoMcMarius11
10Â months, 3Â weeks agodgonz
1Â year ago