There are different Master Keys on Panorama and managed firewalls.

Paloalto Networks PSE-Strata Question Answer

What is the result if a Panorama Administrator pushes configuration to managed firewalls?

The push operation will fail regardless of an error or not within the configuration itself

Provided there’s no error within the configuration to be pushed, the push will succeed

The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

PSE-Strata PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"