Work on a specific device group from Panorama Configuration.

RyanViquiera — Thu, 22 Aug 2019 03:54:17 GMT

We are exploring to use the expedition tool to analyze and implement best practices on our current Panorama/firewall configurations. Our firewall configurations are mosty templates that came from Panorama, so all the configuration are in Panorama. I noticed that I had to use Panorama xml to view all device-group configurations instead of using specific local firewall xml - which shows almost empty when imported to expedition.

My question is, is it possible to run expedition's best practices only on a specific device-group and work on a specific device group? From my experience it is always analyzing the whole panorama configuration, and I can't focus it on a specific device group level.

Thanks.

Re: Work on a specific device group from Panorama Configuration.

dgildelaig — Mon, 09 Sep 2019 09:11:51 GMT

The script actually focus on a whole configuration. More concretely, on the configuration that has been selected as a base config.

Therefore, the only thing that comes to my mind is that you could try to create a new configuration with only the desired DG and run the best pratices on it.

topic Re: Work on a specific device group from Panorama Configuration. in Expedition Discussions

Work on a specific device group from Panorama Configuration.

Re: Work on a specific device group from Panorama Configuration.