ASA to Pano migration using Expedition

stefan_sbiera — Wed, 10 May 2023 14:48:07 GMT

I am new to Expedition although i've used Palos for years. I am in the process of migrating a few ASAs to PaloAltos. The issue i am running into is i cannot use a blank template as the new palos have already configurations. I am hoping Expedition can allow me to use partial export: i.e i would be interested to use the template for security policies, nat rules, and objects if that is possible. ASAs have 100s of such rules and certainly will expedite the process if we can just partially export pano config.

Help would be appreciated.

Re: ASA to Pano migration using Expedition

lychiang — Thu, 11 May 2023 15:49:38 GMT

Hi @stefan_sbiera You can export the full merged config from Expedition and use load config partial command in the CLI of the panorama or firewall to load partial config only. please refer to the detail below:

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-cli-quick-start/use-the-cli/load-configurations/load-a-partial-configuration

topic Re: ASA to Pano migration using Expedition in Expedition Discussions

ASA to Pano migration using Expedition

Re: ASA to Pano migration using Expedition