Provisioning Tufin Changes for Panorama Devices

Overview

When Tufin provisions Designer suggestions to Panorama devices, you can select an option to either provision all changes or only provision the changes made by the Tufin user defined when adding the Panorama device. You can change this setting in stconf.

Configure the Only Tufin Changes Setting

  1. Navigate to: https://<SecureTrack_IP>/securetrack/admin/stcgitest.htm

  2. Navigate to Edit StConf > Fetch StConf.

  3. In the stconf file, navigate to the <Commit_to_panorama> flag.

    The permitted values are AllChanges (default) and TufinChanges.

  4. To configure only Tufin changes in the Panorama device, use TufinChanges.

    <Commit_to_panorama>TufinChanges</Commit_to_panorama>
    <Commit_to_panorama>TufinChanges</Commit_to_panorama>

  5. Click Submit New Conf.