Panorama > Templates > Template Variables
Table of Contents
Expand all | Collapse all
-
- Objects > Addresses
- Objects > Address Groups
- Objects > Regions
- Objects > Dynamic User Groups
- Objects > Application Groups
- Objects > Application Filters
- Objects > Services
- Objects > Service Groups
- Objects > External Dynamic Lists
- Objects > Custom Objects > Spyware/Vulnerability
- Objects > Custom Objects > URL Category
- Objects > Security Profiles > Antivirus
- Objects > Security Profiles > Anti-Spyware Profile
- Objects > Security Profiles > Vulnerability Protection
- Objects > Security Profiles > File Blocking
- Objects > Security Profiles > WildFire Analysis
- Objects > Security Profiles > Data Filtering
- Objects > Security Profiles > DoS Protection
- Objects > Security Profiles > GTP Protection
- Objects > Security Profiles > SCTP Protection
- Objects > Security Profile Groups
- Objects > Log Forwarding
- Objects > Authentication
- Objects > Decryption > Forwarding Profile
- Objects > Schedules
-
-
- Firewall Interfaces Overview
- Common Building Blocks for Firewall Interfaces
- Common Building Blocks for PA-7000 Series Firewall Interfaces
- Tap Interface
- HA Interface
- Virtual Wire Interface
- Virtual Wire Subinterface
- PA-7000 Series Layer 2 Interface
- PA-7000 Series Layer 2 Subinterface
- PA-7000 Series Layer 3 Interface
- Layer 3 Interface
- Layer 3 Subinterface
- Log Card Interface
- Log Card Subinterface
- Decrypt Mirror Interface
- Aggregate Ethernet (AE) Interface Group
- Aggregate Ethernet (AE) Interface
- Network > Interfaces > VLAN
- Network > Interfaces > Loopback
- Network > Interfaces > Tunnel
- Network > Interfaces > SD-WAN
- Network > VLANs
- Network > Virtual Wires
-
- Network > Network Profiles > GlobalProtect IPSec Crypto
- Network > Network Profiles > IPSec Crypto
- Network > Network Profiles > IKE Crypto
- Network > Network Profiles > Monitor
- Network > Network Profiles > Interface Mgmt
- Network > Network Profiles > QoS
- Network > Network Profiles > LLDP Profile
- Network > Network Profiles > SD-WAN Interface Profile
-
-
- Device > Setup
- Device > Setup > Management
- Device > Setup > Interfaces
- Device > Setup > Telemetry
- Device > Setup > Content-ID
- Device > Setup > WildFire
- Device > Log Forwarding Card
- Device > Config Audit
- Device > Administrators
- Device > Admin Roles
- Device > Access Domain
- Device > Authentication Sequence
-
- Security Policy Match
- QoS Policy Match
- Authentication Policy Match
- Decryption/SSL Policy Match
- NAT Policy Match
- Policy Based Forwarding Policy Match
- DoS Policy Match
- Routing
- Test Wildfire
- Threat Vault
- Ping
- Trace Route
- Log Collector Connectivity
- External Dynamic List
- Update Server
- Test Cloud Logging Service Status
- Test Cloud GP Service Status
- Device > Virtual Systems
- Device > Shared Gateways
- Device > Certificate Management
- Device > Certificate Management > Certificate Profile
- Device > Certificate Management > OCSP Responder
- Device > Certificate Management > SSL/TLS Service Profile
- Device > Certificate Management > SCEP
- Device > Certificate Management > SSL Decryption Exclusion
- Device > Response Pages
- Device > Server Profiles
- Device > Server Profiles > SNMP Trap
- Device > Server Profiles > Syslog
- Device > Server Profiles > Email
- Device > Server Profiles > HTTP
- Device > Server Profiles > NetFlow
- Device > Server Profiles > RADIUS
- Device > Server Profiles > TACACS+
- Device > Server Profiles > LDAP
- Device > Server Profiles > Kerberos
- Device > Server Profiles > SAML Identity Provider
- Device > Server Profiles > DNS
- Device > Server Profiles > Multi Factor Authentication
- Device > Local User Database > Users
- Device > Local User Database > User Groups
- Device > Scheduled Log Export
- Device > Software
- Device > Dynamic Updates
- Device > Licenses
- Device > Support
-
- Network > GlobalProtect > MDM
- Network > GlobalProtect > Device Block List
- Network > GlobalProtect > Clientless Apps
- Network > GlobalProtect > Clientless App Groups
- Objects > GlobalProtect > HIP Profiles
-
- Use the Panorama Web Interface
- Context Switch
- Panorama Commit Operations
- Defining Policies on Panorama
- Log Storage Partitions for a Panorama Virtual Appliance in Legacy Mode
- Panorama > Setup > Interfaces
- Panorama > High Availability
- Panorama > Administrators
- Panorama > Admin Roles
- Panorama > Access Domains
- Panorama > Device Groups
- Panorama > Plugins
- Panorama > Log Ingestion Profile
- Panorama > Log Settings
- Panorama > Scheduled Config Export
End-of-Life (EoL)
Panorama > Templates > Template Variables
Describes how to add a variable definition for a template
or a template stack.
You can define variables (PanoramaTemplates) for templates and
template stacks or you can edit existing variables for an individual
device (PanoramaManaged
DevicesSummary).
Variables are configuration components defined on the template or
template stack that provide flexibility and re-usability when you
use Panorama to manage firewall configurations. You can use variables
to replace:
- An IP address (includes IP Netmask, IP Range, and FQDN) in all areas of the configuration.
- Interfaces in an IKE Gateway configuration (Interface) and in an HA configuration (Group ID).
- Configuration elements in your SD-WAN configuration (AS Number, QoS Profile, Egress Max, Link Tag).
When you add firewalls to a template stack, they automatically
inherit variables that you create for a template or template stack.
Template Variable Information | Description |
---|---|
Name | The name of the variable definition. |
Template (device and template stack) | Displays the name of the template to which
the variable definition belongs. |
Type | Displays the type of variable definition:
|
Value | Displays the configured value for the variable
definition. |
Add (template and template stack) | Add a new template variable definition. |
Delete | Delete an existing template variable definition. |
Clone | Clone an existing template variable definition. |
Override (template stack and device) | Overrides an existing template variable
definition inherited from the template stack or device. You cannot
change the variable type or name and you cannot override device-specific
variables. |
Revert (template stack and device) | To clear any overridden values on the template
stack or device level; reverts the overridden variable to its original
template variable definition. |
Get values used on device only (device only) | Populate the selected variable with the
value used on the firewall. Requires that a template or template
stack variable be already defined and pushed to the firewall before
Panorama can retrieve the value. Values fetched from the firewall
will Override the template or template stack
variable to create a device-specific variable. If no variable definition
has been pushed to the firewall, Panorama will return Value not found for
that variable. |
New Template Variable Creation
How to create a new template variable for a template
or template stack.
Add a new template variable definition.
New Template Variable Definition
Information | Description |
---|---|
Name | Name the variable definition. All variable
definition names must start with the dollar sign (“$”) character. |
Type | Select the type of variable definition: IP Netmask, IP Range, FQDN, Group ID, Device Priority, Device ID, Interface, AS Number, QoS Profile, Egress Max, or Link Tag. |
Value | Enter the desired value for the variable
definition. |
Edit Existing Template Variable
How to edit an existing template variable for a template
or template stack.
You can edit a template variable definition for a template
or template stack at any point after the variable is created (PanoramaTemplates). Manage the
template variables to select a variable and edit available values
as needed.
Create or Edit Variable Definition on a Device
How to create device-specific variable definitions from
other devices within the same template stack.
Go to PanoramaManaged DevicesSummary to
create variable definitions or override template variables pushed
from a Panorama template or template stack. Template variables include:
- An IP address (IP Netmask, IP Range, or FQDN) in all areas of the configuration.
- Interfaces in an IKE Gateway configuration (Interface) or an HA configuration (Group ID).
- Configuration elements in your SD-WAN configuration (AS Number, QoS Profile, Egress Max, Link Tag).
Creating a device variable allows you to copy overridden device-specific
variables from a device in the same template stack instead of recreating
them individually. By default, all variable definitions are inherited
from the template or template stack and can be only overridden—you
cannot delete or create new variable definitions for an individual
device.
Create device variable definitions by
copying variable definitions from existing devices in the template stack
or Edit existing device variable definitions.