topic Re: Copy configuration between different platforms in General Topics

Copy configuration between different platforms

CarlBergin — Mon, 10 Jul 2017 09:16:03 GMT

Hello,

We are about to upgrade our PA500 to PA220.

We have 2 in HA, both running 7.1.9 and a panorama running pan OS 7.

I was wondering is there a way to copy the configuration from the pa500 to the pa220?

Kind Regards,

Carl

Re: Copy configuration between different platforms

TranceforLife — Mon, 10 Jul 2017 09:36:54 GMT

Hi,

You better upgrade your PA500 at least to 8.0.0 release (if possible), then export and import config into the new cluster.

You should not have a problem with your interfaces mapping.

Thx,

Myky

Re: Copy configuration between different platforms

TranceforLife — Mon, 10 Jul 2017 14:36:20 GMT

Hi,

Forgot to mention that it is better to keep both devices on the same PAN-OS during config migration 😄

Re: Copy configuration between different platforms

acc6d0b3610eec313831f7900fdbd235 — Mon, 10 Jul 2017 15:07:18 GMT

Hi @CarlBergin

Here is the latest eTAC recommended release published to partners a couple of weeks ago.

eTAC Recommended Release for PAN-OS is PAN-OS 7.1.10. For customers on older code releases, we recommend PAN-OS 6.1.17.
Palo Alto is no longer recommending PAN-OS 7.1.9 per the following advisory: https://live.paloaltonetworks.com/t5/Customer-Advisories/UPDATED-06-19-Important-information-regardi...
User-ID Agent 7.0.7 is recommended
GlobalProtect 3.1.6 and 4.0.0 are recommended.

PAN-OS 8.0:

PAN-OS 8.0.0 is the minimum required version for the new VM-50, VM-500, VM-700, PA-220, PA-800 Series and PA-5200 Series.
The new User-ID Agent 8.0.x and GlobalProtect 4.0.x are both tied to PAN-OS 8.0
We are still monitoring PAN-OS 8.0.3 as this is a new release, before providing any recommendations

EOL Reminder:

PAN-OS 7.0 support has been extended and will become EOL on December 4, 2017

The above is simply a guideline based on what eTAC has been seen in the field, and because the code has not been out for too long to track potential isues. As of June PAN-OS maintanance release 8.0.3 has been put out.

As @TranceforLife

Make sure that both of you firewalls are running ther same PAN-OS code release. Also, avoid export the .XML configuration from a PAN-OS 8.0.x to a 7.1.x as some features may not be backward compatible and you will get a configuration error output. Upgrading from 7.1.x to 8.0.x should be no problem.

I hope this helps

Re: Copy configuration between different platforms

TranceforLife — Mon, 10 Jul 2017 16:07:40 GMT

@acc6d0b3610eec313831f7900fdbd235 always such a detailed answers. Well spoken