StudyToCert

All certifications / NGFW Engineer / Lessons

Palo Alto Networks Certified Next-Generation Firewall Engineer NGFW-Engineer · Domain 3: Integration and automation

Panorama commit and push workflow; Panorama modes (Panorama, Management Only, Log Collector) and version requirements

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Panorama has its own candidate and running configuration, just like a firewall, and it also holds configuration intended for managed devices. Changes therefore take two steps to reach a firewall, and forgetting the second step is one of the most common real-world mistakes. This lesson covers that workflow, the modes a Panorama appliance can run in, and the version rules that decide upgrade order.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study NGFW Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the NGFW Engineer study plan