topic Re: Refresh Configuration for BPA in Expedition Discussions

Refresh Configuration for BPA

rodvand_de — Wed, 06 Feb 2019 08:36:08 GMT

Hi,

I'm using Expedition for the BPA part at the moment. Is there any way of "refreshing" the configuration I'm working on after making adjustments after running the BPA? At the moment I need to create a new project to fetch any new configuration.

My expected workflow:

- Import device configuration to project

- Run BPA

- Adjust according to the BPA

- Refresh the configuration from the device

- Run BPA - see the improvement

Any way of achieving this?

Re: Refresh Configuration for BPA

bagherib — Wed, 06 Feb 2019 13:33:31 GMT

I haven't yet got it to work 100% correctly. I recommend you go the old fashion route and just use the online portal to get your BPA results, then go apply them to the FW.

I've made changes to my 220 and saw them change instanly in the BPA section. I've made other changes and it doesn't show in the BPA. I've even re-imported my device's config files and tried re-importing the entire device with no luck. Thereofre, if for a client, I recommend the customer success portal

https://customersuccess.paloaltonetworks.com/bpa/

Re: Refresh Configuration for BPA

rodvand_de — Wed, 06 Feb 2019 21:59:20 GMT

Yeah, in most cases the online BPA is better to work with.

In other use cases the configuration cannot be uploaded to the BPA due to restrictions, and that is why I am trying to find a way of using Expedition for this.

Re: Refresh Configuration for BPA

sjanita — Fri, 08 Feb 2019 21:21:26 GMT

the config refresh option (i.e. update the existing config) is coming in an upcoming Expedition release.

Re: Refresh Configuration for BPA

dgildelaig — Sat, 09 Feb 2019 18:27:37 GMT

Reuploading of a PANOS config is now available. It will show as a new source that you can use, and if the name already existed, it will append the current date.

From that point, you may have to set the new version of the config as the new "base configuration" and you will be able to reapply the BPA on the new base config.