--> There are two types of transaction locks that can be applied on the Palo Alto Firewall:
1) Commit Lock:
--> Prevents other admins from committing the candidate configuration.
--> However, It allows the admins to do the changes on the candidate configuration.
--> It is recommended to use Commit Lock Whenever you want to have only one administrator to perform changes on the Palo Alto Firewall.
--> The lock automatically gets removed if the administrator performs the commit operation.
2) Config Lock:
--> Prevents other admins from changing the candidate configuration.
--> It is recommended to use Config Lock when you as an administrator taking the backup of the Palo Alto Firewall configuration so that no one is able to change the configuration while you are taking the backup.
--> The lock automatically gets removed if the administrator performs the commit operation.
--> This Lock can be forcefully removed by any super administrator by using the following command:
> request config-lock remove
0 comments:
Post a Comment