Combining policies from different virtual systems

Brinkman — Thu, 21 Feb 2013 16:43:22 GMT

So we are migrating from ASAs to PA 5050's. We are trying to do it with as little interruption as possible so what we did is put the PAs inline behind the ASAs using vwire. Our thought is to build our 4 environments as separate virtual systems in order to get our rulebase built and verified then once it's verified we can migrate the 4 virtual systems into one system and treat the 4 environments as separate zones. The thing I'm running into is I can't find a way to combine/copy the separate virtual systems rulebases into the main one. Normally I would assume there is a way to just copy and paste the rules over but I can't seem to find anything like that. Anyone have suggestions before I get to far into this.

Thanks

Kris

Re: Combining policies from different virtual systems

SCoupland — Thu, 21 Feb 2013 23:34:12 GMT

It would be a manual process unfortunately either by recreating the rules in the CLI/GUI or by editing the XML of an exported config and then re-importing the config. There's a simply article about it where one of the PAN TAC engineers did it which can be found here -

topic Combining policies from different virtual systems in General Topics

Combining policies from different virtual systems

Re: Combining policies from different virtual systems