Is it possible to View Panorama-Pushed-Config on Exported XML?

When policies are pushed from panorama to the device, and if users want to export the configuration from Device or from Panorama's Device Context, only locally configured configuration are exported in xml format.

Rules in Panorama

Locally Configured Rule on Device and Rule Pushed from Panorama

Only Locally Configured Rules are Exported in XML

This is because there is no way to distinguish the configuration difference in exported XML between those configured locally on a device from those pushed from Panorama.

One way to retrieve all policies at one place is to do "show running security-policy" and "show running nat-policy" from the CLI of the device.

owner: ssharma