topic Re: Palo Alto HA firewalls like for like replace in Next-Generation Firewall Discussions

Palo Alto HA firewalls like for like replace

New-Memeber — Tue, 20 Feb 2024 15:11:33 GMT

Hello Guys,

I have a project to replace palo alto with another two palos they are configured as HA and i want to get all the cli commands in one go and past it into the new firewalls ? will that work?

who knows what is the command that we could do that please?

Re: Palo Alto HA firewalls like for like replace

Alejandro_Hernandez — Tue, 20 Feb 2024 22:03:17 GMT

Hi @New-Memeber

You will follow the next steps

Resolution

Run the following command to view the configuration:
- "set" format: > set cli config-output-format set
- "xml" format: > set cli config-output-format xml
Enter configure mode: > configure

Enter show to see the complete configuration. You can also view certain components, such as "show network interface".

Note: The output of show is not necessarily the sequence to execute the commands. A command that appears at the top may reference something defined later in the listing.

The following example demonstrates how to view a configuration in "set" format.

> set cli config-output-format set
> configure
Entering configuration mode
[edit]

# show

set mgt-config devices localhost.localdomain ip 127.0.0.1
set mgt-config user admin phash fnRL/G5lXVMug
set mgt-config user admin permissions role-based superuser yes

set zone L3-Trust network layer3 ethernet1/3
set zone L3-Trust network layer3 ethernet1/4
set zone L3-Trust network layer3 ethernet1/5
set zone L3-Trust enable-user-identification no

set rulebase security rules rule1 from any
set rulebase security rules rule1 to any
set rulebase security rules rule1 source any
set rulebase security rules rule1 destination any
set rulebase security rules rule1 service any
set rulebase security rules rule1 application any
set rulebase security rules rule1 action allow

Re: Palo Alto HA firewalls like for like replace

New-Memeber — Tue, 20 Feb 2024 22:31:31 GMT

Hello Alejandro,

thank you for your reply.

I was talking about a command that would show the whole configurations after run show without keep entering the tap.

Also my second question are we able to see the passwords without been encrypted on the running config as we can see it on Cisco ASA please?

Re: Palo Alto HA firewalls like for like replace

Alejandro_Hernandez — Tue, 20 Feb 2024 22:43:42 GMT

About the passwords

How are Passwords Stored in the Configuration Files?

The passwords in configuration files are either stored as a salted hash or in encrypted form (AES-256).

Is it possible to recover the passwords?

It is not possible to recover the plain text versions of user passwords, pre-shared keys for IPSec, or private keys associated with certificates.