Deploy Firebox Templates

After you make changes to template settings, you must deploy the template to deploy the settings to subscribed devices.

When you deploy a template, two things happen:

The saved template settings are deployed to the cloud.
Template settings are deployed to all subscribed devices.

A template deployed to each subscribed device includes the most recent previously deployed device configuration for that device plus the settings from the template.

If a template does not have any subscribed devices, it is still important to deploy template changes so that devices that subscribe to the template in the future get the latest updates to the template.

Deploy a Template From the Notification Banner

After you update settings in a Firebox template, the Configuration Details tab in the template shows a message banner that indicates that you have undeployed saved changes.

To deploy a Firebox template, from WatchGuard Cloud:

Configure the template settings and save the changes. For more information about template settings, go to Manage Firebox Templates.
After you save a configuration change, a message banner shows that the template has undeployed saved changes.
To deploy the template, in the message banner, click Schedule Deployment.
The Schedule Deployment dialog box opens.

In the Description text box, type a description of the settings you configured.
Click Deploy.
A confirmation dialog box appears with the time and date of the deployment. When there are many subscribed devices, a progress bar shows the progress.
Click Close.

View the Template Deployment History

For each template, the Deployment History tab shows the deployment of the initial configuration, when the template was added, and each subsequent deployment to the cloud.

When you add a new template, Version 1 is deployed automatically, and includes only the template Name and Description.

Manage Template Deployment from the Deployment History

If a template has saved configuration changes that are not deployed to the cloud, the Deployment History page shows that you have undeployed changes. From this section you can deploy or revert the undeployed saved template changes.

Screen shot of the Deployment History when you ahve undeployed saved changes and a deployment is not scheduled

To revert undeployed saved template changes, from WatchGuard Cloud:

In the Deployment History, click Revert Changes.
This option is available only if there are undeployed saved changes.
In the confirmation dialog box, click Revert.
The template configuration settings in WatchGuard Cloud revert to the settings from the last deployed configuration.

To deploy the saved template changes, from the Deployment History tab:

In the Deployment History, click Schedule Deployment.
The Schedule Deployment dialog box opens.

In the Description text box, type a description of the settings you configured.
Click Deploy.
A confirmation dialog box appears with the time and date of the deployment.
In the confirmation dialog box, click Close.

After you deploy or revert undeployed saved changes, the Pending Changes section is no longer shown on the Deployment History page for the template.

View Template Deployment Status

In the Deployment History tab for a template, the deployment status Succeeded indicates that the saved template configuration changes are deployed to the cloud for deployment to subscribed devices. Template deployment also creates a new deployment for each device currently subscribed to the template.

To see the deployment status of the template to a subscribed device, you must view the Deployment Status page for the Firebox.

View the Template Configuration Report

To see the configuration deployed for each template version, you can view the template Configuration Report.

For information on how to compare consecutive configuration versions, go to Compare Configuration Versions.

To view the Configuration Report for a template:

In the Deployment History, click the version number. Or, click and select View configuration report.
The Configuration Report opens. The top of the report shows the configuration version number.

To go to a section of the report, click Go To Section, and click a section name.
The Configuration Report for a template only includes sections for the settings you can configure in the template.
To print the report, click .
To return to the Deployment History tab, at the end of the report, click Back.

View the Template Deployment Status for a Subscribed Device

When you deploy a template, the changes are automatically deployed to all devices that subscribe to the template. The Firebox must connect to WatchGuard Cloud to download and apply the update.

A template deployment to subscribed devices does not deploy other saved undeployed changes for those devices.

To review template deployment status for a subscribed device, from WatchGuard Cloud:

Select Configure > Devices.
Select the cloud-managed Firebox.
Click Deployment History.
In the Deployment History, a template deployment has the TEMPLATE label in the Version column.

To see the name of the updated template that was deployed for a device:

In the Firebox Deployment History, click the version number. Or, click and select View configuration report.
At the top of the configuration report, hover over the Template label.

If you change the template subscription from the Firebox device configuration, the Deployment History for the device shows an entry with the description "Template subscription update".

Screenshot of the Deployment History with a template subscription update

You cannot revert a device to a Firebox template configuration deployment, but you can revert to a configuration for deployments previous to the template deployment.

For more information about the deployment history, go to Manage Device Configuration Deployment. For information about how to compare configuration files, go to Compare Configuration Versions.