topic How to Import and Export Address and Address Objects PAN OS 10.1.2 in General Topics

How to Import and Export Address and Address Objects PAN OS 10.1.2

Adam-West — Wed, 20 Jul 2022 21:01:40 GMT

Can anyone advise me on how to import multiple ip addresses in bulk into the firewall? Currently using PAN OS 10.1.2.

We have acquired a new location and we have almost 400 objects, ranges, and FQDNs that will need to be imported into our environment. We are also using multiple group consisting of PA5200s, 3200s, and 220s. I would like to be able to use a .csv, notepad file, or terminal emulator to make this happen smoothly. I would also like to do an export from PAN to make sure I was putting everything in the correct format. We also run a HA environment so I would want to make sure these were added to the correct Dynamic address groups object address.

Re: How to Import and Export Address and Address Objects PAN OS 10.1.2

reaper — Mon, 12 Sep 2022 08:59:36 GMT

do you have Panorama? this may be a good point to consider getting panorama for centralized management and easily sharing objects between devices 🙂

if you export the config off of the donor firewall and import it into the new firewall, you can "import partial" (CLI) whole swaths of the config from the exported config file into the new device

an alternative method is using the toggle 'set cli config-output-format set', going into config mode and running 'show' (with or without a '| match x' filter

this will output a whole bunch of ready-to-reuse set commands you can simply let loose in the new firewall to import the config

hope this helps

Re: How to Import and Export Address and Address Objects PAN OS 10.1.2

BPry — Mon, 12 Sep 2022 18:21:47 GMT

@Adam-West,

I'll just add that if you can't justify Panorama, you can do the templating yourself if your just a tad handy with scripting and XML format. You can utilize a Jinja2 template just as easily yourself to ensure that your firewalls are all sharing the same objects if you script it yourself.