topic Re: Exporting shared rulebase in Expedition Discussions

Exporting shared rulebase

rwendt — Tue, 18 Jan 2022 21:52:31 GMT

I am in the process of converting our Juniper SRX's to Palo Alto's.

During the process I reorganized some of the security rules and converted them to shared pre rules.

When I export the configuration it doesn't seem to get these rules? It looks like I can only export vsys1 rules?

Am I doing something wrong or is this not supported?

Re: Exporting shared rulebase

lychiang — Tue, 18 Jan 2022 22:06:32 GMT

@rwendt if you convert the policy to share , you won’t see it in the pan-OS config , so leave it in vsys1 and you can drag it to the shared folder on the panorama config during merge .

Re: Exporting shared rulebase

rwendt — Wed, 19 Jan 2022 13:52:50 GMT

Thanks for the reply ill do that

Re: Exporting shared rulebase

rwendt — Wed, 19 Jan 2022 14:01:04 GMT

Can you move it back to vsys1 after moving it to shared?

Re: Exporting shared rulebase

rwendt — Wed, 19 Jan 2022 14:29:45 GMT

Nevermind. I manually changed the values in the mariadb database. 😄

Re: Exporting shared rulebase

rwendt — Wed, 19 Jan 2022 15:31:33 GMT

@lychiang I don't want all the policies shared, only some of them. It doesn't seem like there is a way to do this. Is shared policies something thats being worked on? It seems kind of pointless to have an option to convert to shared if you can't do anything with them?

Re: Exporting shared rulebase

lychiang — Wed, 19 Jan 2022 17:15:29 GMT

@rwendt,

When you merged with the PAN-OS base config, you could drag all rules to vsys1 on the right , after you merged, you could select the rules that you want to convert to share and right click -> Rule action -> Converted to shared . What I trying to say is don't convert the rule to shared before you merge with the PAN-OS base config.

Re: Exporting shared rulebase

rwendt — Wed, 19 Jan 2022 18:05:48 GMT

oh ok that makes sense. I'll give that a try.

Thanks again.