A Palo Alto firewall change has broken an application. You click Revert to running configuration, but the outage remains. The key distinction: that operation discards uncommitted candidate edits; it does not undo the configuration that is already running. To restore an older committed firewall configuration, load the intended saved version and commit it after reviewing the differences.[1]
This guide answers how to roll back a Palo Alto configuration safely, including the additional deployment boundary introduced by Panorama. It provides a decision table, a change-control worksheet and a recovery acceptance matrix. The workflow is an original operational recommendation, not a record of a production incident or a tested recovery-time guarantee.
