topic Re: Export part of ruleset (based on filter) in Expedition Discussions

Export part of ruleset (based on filter)

hbalzac — Tue, 14 May 2019 15:50:04 GMT

Say that i have imported a big ruleset (from junos), i have to split this ruleset i to multiple firewall (due to redisign)
Is there any way to export part of the ruleset (maybe be search The part i want)

Re: Export part of ruleset (based on filter)

Nick_Johnson — Mon, 20 May 2019 16:21:37 GMT

I am starting down this same road of needing to break single existing config into multiple PA firewalls. Not sure yet how I will approach this but looking at Expedition so far I am not seeing the way.

Re: Export part of ruleset (based on filter)

sjanita — Tue, 21 May 2019 00:19:37 GMT

For the current version you will need to follow these steps.

Create a project, import 2 base configurations (Base-FW1, Base-FW2)

Import the 3rd party configuration (review and make edits to the migrated configuration)

Create a snapshot

Merge the migrated objects and policies to Base-FW1

Cleanup the Base-FW1 configuration by deleting the policies that do not need to be added to Base-FW1

After deleting the unneeded policies, remove the unused objects

Generate the XML for Base-FW1 or send the configuration via API

(for Base-FW2)

Load the snapshot

Merge the objects and policies to Base-FW2

Cleanup the Base-FW2 configuration by deleting the policies that do not need to be added to Base-FW2

After deleting the unneeded policies, remove the unused objects

Generate the XML for Base-FW1 or send the configuration via API

Re: Export part of ruleset (based on filter)

Nick_Johnson — Tue, 21 May 2019 11:28:37 GMT

Thanks for the plan. Will test this out in the next few days or sometime next week hopefully.