topic Re: Security Profiles not showing up in Expedition in Expedition Discussions

Security Profiles not showing up in Expedition

sami-su — Tue, 26 Feb 2019 23:54:06 GMT

Hello,

I currently push my security profiles from Panorama to devices, When adding the device to expedition I do not see the security profiles show up in Expedition. Would someone be able to explain why and also let me know how I can pull them into Expedtion?

Re: Security Profiles not showing up in Expedition

sjanita — Wed, 27 Feb 2019 02:40:32 GMT

All configurations pushed from Panorama will not be seen in the firewall's local running-config configuration file. this is expected.

if you want to see the security profiles (pushed from Panorama) you will need to import the Panorama configuration.

Re: Security Profiles not showing up in Expedition

sami-su — Wed, 27 Feb 2019 23:23:24 GMT

I had to build the profiles from the Panorama config using the xml code from the profiles then import into my project. Is there a better way of doing this?

Re: Security Profiles not showing up in Expedition

Chad_Parrish — Fri, 01 Mar 2019 20:15:00 GMT

We are seeing the same issue, it would help out a lot if we could more easily pull those profiles into Expedition from Panorama.

https://live.paloaltonetworks.com/t5/Expedition-Discussions/Migrating-of-Local-Rules-that-use-Panorama-defined-shared/td-p/250515

Re: Security Profiles not showing up in Expedition

sjanita — Sun, 03 Mar 2019 10:20:02 GMT

Saul / Chad

Have you tried importing your Panorama config into your project? Then you can merge your recently migrated config into the appropriate device-group in Panorama within Expedition.

Once your new config is merged into Panorama you will then have access to the security profiles and groups that can be applied to the recently mgirated security policies.

Once you've finalized the merge and config of your policies you can then incrementally load only the edited or new device-group and any shared objects into Panorama.

I will write a workflow document for this process this week and publish on the live site.