View, approve, and commit pending changes

You can view the configuration changes that you and other administrators have made before the new configurations and policies are transferred to the NGFW Engines. If an optional approval workflow is enforced, changes must be approved before they are transferred to the engines.

Pending changes are shown by default in the Home view for all engines and on the engine-specific home pages.

You can view, commit, and transfer pending changes to the engines. You can use pending changes to prevent transferring configurations that are not complete. You cannot reject individual changes. If you want to override a change, edit the element or policy again, then approve both changes. If a later change overrides an earlier change, only the most recent change is transferred to the engine.

You can optionally enable an approval workflow in which an administrator must approve changes before they are committed. For example, a supervisor or senior administrator can view and approve the changes made by other administrators. Administrators with the following permissions can view the changes, approve the changes, and transfer the configurations to the engines:

  • Administrators that have the Approve Changes permission
  • Administrators with unrestricted permissions (superusers)

By default, the same administrator who made the changes cannot approve the changes. You can optionally allow administrators to approve their own changes.

You can approve pending changes individually, but you must commit all of the changes at the same time. You can commit pending changes only when all changes have been approved.

  For more details about the product and how to configure features, click Help or press F1.

Steps

  1. (Optional) To compare the pending changes to the engine's current policy, click View Changes on the home page of the engine.
  2. (Optional) To view recent policy uploads, click View Recent Commits. To return to the Pending Changes pane, click View Pending Changes.
  3. If an approval workflow is enforced, approve some or all pending changes.
    • To approve an individual pending change, click the Approval Status checkmark icon for that change.
    • To approve all changes, click Approve All.
  4. To commit all pending changes and transfer them to the engine or engines, click Commit Changes.

Result

The changes made to configurations and policies by all administrators are transferred to the engines.