topic Re: Moving security policies from one PA to another in Expedition Discussions

Moving security policies from one PA to another

SamW — Fri, 03 Feb 2023 21:51:30 GMT

I have a link that I would like to move over to another PA. One of the most time consuming tasks is to move the security policies associated to this link from one PA to another. What I would like to do is to get all the security policies that have the word, "link1" in the source zone from one PA (5220), and moved over to another PA (7050). Is there a way I can do this in Expedition? TIA!

Re: Moving security policies from one PA to another

lychiang — Fri, 03 Feb 2023 22:01:25 GMT

Hi @SamW Migration from palo alto networks to palo alto networks, you can just use "load config partial" command in the pan-os , you could filter the rules that contain source zone "link1" in expedition, and delete all other rules , then export the config in xml format , then do load config partial on the new firewall to load the security rules from the xml.