I guess the answer is A C and E
https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/template-capabilities-and-exceptions
From the link provided:
You can use Templates and Template Stacks to define a wide array of settings but you can perform the following tasks only locally on each managed firewall:
- Configure a device block list.
- Clear logs.
- Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode.
- Configure the IP addresses of firewalls in an HA pair.
- Configure a master key and diagnostics.
- Compare configuration files (Config Audit).
- Renaming a vsys on a multi-vsys firewall.
I have to disagree.
You _can’t_ rename a vsys
You _can’t_ change the Fw mgt ip
You _can’t_ change to FIPS mode, this is done by CLI using the serial cable and it wipes the whole config of the Fw back to defaults, not a small thing
You _can_ add administrator accounts.
You _can_ configure a device block list. This is in Device/Setup/Interfaces.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SergioJ
Highly Voted 1Â year, 1Â month agoMerlin0o
8Â months, 1Â week agoMarshpillowz
Most Recent 8Â months agoMetgatz
9Â months, 1Â week agohomersimpson
10Â months, 1Â week agoViriathus
9Â months, 1Â week agohomersimpson
5Â months, 1Â week agoskullomania
10Â months, 1Â week agoOmid2022
10Â months, 3Â weeks agoMcMarius11
11Â months, 3Â weeks agodgonz
1Â year ago