topic How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches in Prisma SD-WAN Discussions

How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches

BrianPedersen — Wed, 09 Aug 2023 06:38:47 GMT

Anyone got any suggestions how to do this without loosing the branches?

I mean, it is pretty easy to migrate to a new platform if you got "normal" ipsec tunnels but when using SDWAN that config are made by Panorama when adding fw's to the SDWAN Cluster in Panorama.

So how to replace old firewall cluster with new one without loosing the Panorama SDWAN generated ipsec tunnels that makes all branches to disconnect Panorama and datacenter

Re: How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches

ecraig — Wed, 09 Aug 2023 13:57:28 GMT

This sounds like PAN-OS SDWAN rather than Prisma SD-WAN.

You might try posting this in one of the NGFW/PAN-OS discussion groups.

Re: How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches

BrianPedersen — Thu, 10 Aug 2023 04:45:26 GMT

Your right but I didn't put it here. I wrote in general topics and can see that configuration would have been better but I don't know how to move this posting 😞

Re: How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches

ecraig — Thu, 10 Aug 2023 13:45:05 GMT

Are you able to access:

live.paloaltonetworks.com > Discussions > Configuration Discussions > Next-Generation Firewall Configuration Discussions

live.paloaltonetworks.com > Discussions > Configuration Discussions > Panorama Configuration Discussions

And just copy your question as a new post there?