topic Panorama import config of firewall in General Topics

Panorama import config of firewall

Alex_Samad — Thu, 08 Jun 2017 06:24:43 GMT

So setup my HA cluster woo hoo. So now I have setup panoram

I have gone to managed devices and added in my 2 PA from above - by serial number, I can see then, I can change context into them. I went to each PA and add in the FQDN for the panoram in the setup panoram section

Now I go Device / Setup / Oprations / Import / IMport device configuration

and there are no device in the device drop down list 😞

Now sure what I need to do or how to debug ...

Re: Panorama import config of firewall

acc6d0b3610eec313831f7900fdbd235 — Thu, 08 Jun 2017 06:35:05 GMT

Hey @Alex_Samad

Just one observation. Have you committed the changes to Panorama after adding the devices to Managed Devices?

If not, I advise you to do that, as adding devices is considered a Panorama change; hence, needs a commit to the Panorama level to take effect.

After that, try the import process again, and you should be able to see the devices listed there.

Just one comment, I typically add devices to Panorama, and then do most of the network and device configurations through the templates, so it is easy to control. I then create a device group, and add all my policies into it, and then push everything templates and device group changes to the appliance from Panorama. This way I don't need to import the firewall after into the management center.

If these are existing firewalls that have never been managed via Panorama, then yes, the process you are mentioning makes a lot of sense.

https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/panorama-features/firewall-configuration-import-into-panorama

Re: Panorama import config of firewall

Alex_Samad — Thu, 08 Jun 2017 06:37:59 GMT

Yes I have commited - was going to try rebooting panorama 🙂

They are not new - I want to grab all the work I have on them into panorama.

So I haven't as yet started to look at templates. Still lots of reading to do.

and that was the URL i was using

Re: Panorama import config of firewall

Alex_Samad — Thu, 08 Jun 2017 06:41:51 GMT

Okay I rechecked the page and reread.

I found my mistake

I had thought I had read, you can import a device unless it is attached to a device group or template

I had mine attached to a device group !!!

I have now removed it from the device group (and template) and I can see it in the drop down box

Thanks