topic Panorama XML output in Expedition Discussions

Panorama XML output

Jan_Linhart — Tue, 09 Apr 2019 14:00:18 GMT

Hi,

I'm trying to migrate Checkpoint FW to Panorama Device Group.

I have imported and edited Checkpoint config, imported Panorama config (about 5.5 MB), merged Checkpoint policies to empty device group and objects to shared objects (and merged them to use existing Panorama objects instead of Checkpoint objects). Up to this point everything works correctly, but when I generate XML output and want to download it, the output XML file has only about 3.1 MB and when I import it to Panorama, there is huge amount of errors and differences between newly uploaded config and running config.

Do you have any idea, how could this be done?

Thank you,

Jan

Re: Panorama XML output

dgildelaig — Thu, 11 Apr 2019 11:19:15 GMT

It could be so many things....

Could you provide some descriptions on the errors that you see when pushing the config?

Re: Panorama XML output

Jan_Linhart — Fri, 12 Apr 2019 18:46:19 GMT

I have found the reason of difference in size of XML. When I don't download just XML, there is different sturcture etc. - when I download whole zip archive, there is xml called "pretty" 😄 that is of correct size.

Even though there is so many differences in former and new config. It cannot be shown in config audit and I have to do diff somewhere else.

I have found it too risky to use newly generated config and push it to Panorama (Panorama is used for production environment with about 50 firewalls). The only "secure enough" way is to use generated cli config commands and paste just the ones related to newly added firewall.

Re: Panorama XML output

dgildelaig — Fri, 12 Apr 2019 19:11:07 GMT

The size of the generated output has been discused before in other threads.

We do offer the pretty version of the XML for those people that would feel suspicious about the content in the condensed version, which skips tabs and irrelevant XML spaces.

Re: Panorama XML output

Sujanya — Wed, 19 Oct 2022 11:58:58 GMT

Hi @Jan_Linhart ,

Can you please help me with the CLI command to upload the specific configurations from expedition generated xml file to panorama device group.

I generated the xml file , need to move only specific configurations to panorama via CLI.