I guess the answer is A C and E
https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/template-capabilities-and-exceptions
From the link provided:
You can use Templates and Template Stacks to define a wide array of settings but you can perform the following tasks only locally on each managed firewall:
- Configure a device block list.
- Clear logs.
- Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode.
- Configure the IP addresses of firewalls in an HA pair.
- Configure a master key and diagnostics.
- Compare configuration files (Config Audit).
- Renaming a vsys on a multi-vsys firewall.
I have to disagree.
You _can’t_ rename a vsys
You _can’t_ change the Fw mgt ip
You _can’t_ change to FIPS mode, this is done by CLI using the serial cable and it wipes the whole config of the Fw back to defaults, not a small thing
You _can_ add administrator accounts.
You _can_ configure a device block list. This is in Device/Setup/Interfaces.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SergioJ
Highly Voted 10Â months, 3Â weeks agoMerlin0o
6Â months agoMarshpillowz
Most Recent 5Â months, 2Â weeks agoMetgatz
6Â months, 3Â weeks agohomersimpson
7Â months, 4Â weeks agoViriathus
6Â months, 3Â weeks agohomersimpson
2Â months, 3Â weeks agoskullomania
7Â months, 3Â weeks agoOmid2022
8Â months, 1Â week agoMcMarius11
9Â months, 1Â week agodgonz
10Â months, 3Â weeks ago