Expedition Device Import

jared.mathis — Tue, 07 Jan 2020 22:16:09 GMT

Hello,

I have a PA-3020 device that I would like to use Expedition to help me Audit and Evaluate. I can't give Expedition direct access to the FW, so I've been trying to import XML files. I can't seem to get a full import of everything on the firewall. I found this posting, but it didn't have a resolution: https://live.paloaltonetworks.com/t5/General-Topics/Issue-exporting-a-complete-configuration-out-of-Panorama-to-put/td-p/277415

In expedition, I create a Project. Then in the project I navigate to import, and under Palo Alto I've tried the following:

1 On the FW I tried, "Export named configuration snapshot". It imports just about nothing. Just has the management information and basic interface info (non of the sub-interfaces.) No rules, no objects.

2 On the FW I tried, "Export device state". But the files show as invalid "The content is not a valid PANOS configuration. No version Found:/home/userSpace/projects/test/toImport/template-config.xml.dat"

3 In Panorama, I tried "Export named Panorama configuration snapshot". This imports a lot of devices, but oddly not the devices I cared about.

4 In Panorama, I tried "Export Panorama and devices config bundle". Same problem as in 1.

Number 3 is the closest I've gotten to getting things imported, but I don't want everything in our Panorama. Just the firewalls I care about.

Thanks!

Re: Expedition Device Import

egarantiva — Mon, 01 Jun 2020 05:06:50 GMT

Hello

I've tried exporting on Panorama "Export Panorama and devices config bundle". Then I decompressed the tgz and imported the XML from Panorama. By this way I could see the Device-Group and Template configuration con Expedition GUI with all details, however I cannot export SET output from Template configuration.

Regards

Edgar

topic Re: Expedition Device Import in Expedition Discussions

Expedition Device Import

Re: Expedition Device Import