topic Re: Import Panorama Configuration Into Expedition and export Device Specific configuration in General Topics

Import Panorama Configuration Into Expedition and export Device Specific configuration

LijoMathai — Sat, 18 Feb 2023 16:23:49 GMT

Hi Experts, I am quiet new to Expedition, currently i am involved in a mass project where i have to migrate exiting Palo Alto Firewall into new. The existing firewall is managed by panorama which have tons of Network addresses and security policies which also uses shared object and polices from panorama.

Now my objective is to import that panorama config into expedition and export out config related to specific firewall that i am planning to migrate.

Is there any documentation or video on this?

Re: Import Panorama Configuration Into Expedition and export Device Specific configuration

TomYoung — Sun, 19 Feb 2023 02:30:30 GMT

Hi @LijoMathai ,

I have migrated a single firewall configuration to Panorama using Expedition. So, the reverse should work, also. Here are the steps:

Import the NGFW configuration 1st. The 1st imported PAN-OS configuration is the base config. I personally like to load the Day 1 Configuration on my NGFW and use it as my base config. In that way, I have a lot of best practices configured.
Import the Panorama config into Expedition next. Look at the dashboard and fix any items, if desired.
Under Export drag the source configuration items on the left under templates to Device or Network on the right. Drag the policies and objects on the left to vsys1 on the right.
Merge and export.

https://www.youtube.com/watch?v=RMHfO4MA0jw

Thanks,

Tom

Edit: Hi @LijoMathai , the steps above work if the new NGFW is not managed by Panorama. Is that what you want?

Re: Import Panorama Configuration Into Expedition and export Device Specific configuration

LijoMathai — Thu, 23 Feb 2023 13:59:01 GMT

Hi, I managed to get the required config, Thanks

Re: Import Panorama Configuration Into Expedition and export Device Specific configuration

Bkrishnamoorthy — Wed, 09 Aug 2023 05:38:34 GMT

@LijoMathai I am also looking to do the same, how did you make it work?

Re: Import Panorama Configuration Into Expedition and export Device Specific configuration

AurangzaibButt — Tue, 25 Jun 2024 08:47:27 GMT

Hi, How did you manage to export specific device group configuration?