Basic Workflow Questions

Akeakamai — Wed, 22 Apr 2020 16:37:42 GMT

Migrating four Checkpoint clusters into single Panorama/HA firewall pair. My initial thought was to tackle each Checkpoint cluster as it's own project (good/bad idea? not sure how projects fit into overall workflow). Running 1.1.66.2 if it matters.

I was able to import Checkpoints and Panorama base config. I needed to provide rules to someone else for review prior to implementation, did a merge into Panorama then export security rules from Panorama into CSV. This all worked as expected. Now I need to go back to original Checkpoint configs to fix zone names and network interfaces, but the original Checkpoint configs are no longer visible. Makes some sense after a merge.

- Should I tackle this as a single project? Think of a project as a client?

- Do the original source files need to have everything resolved (address objects, zones, interfaces, etc) prior to a merge? Is there a way to go back to fix something in source configuration after a merge, then merge again?

Re: Basic Workflow Questions

dgildelaig — Wed, 22 Apr 2020 16:47:49 GMT

It is better to resolve the different parts on each source, to help you focus on each context, but you can also do the different resolutions now on your Panorama source.

As you merged the Checkpoint configuration into the Panorama configuration, now you should be able to see those objects in your Panorama source.

Proceed from there

topic Basic Workflow Questions in Expedition Discussions

Basic Workflow Questions

Re: Basic Workflow Questions