topic Exporting Application Groups in General Topics

Exporting Application Groups

kamorris — Thu, 11 Jul 2019 02:46:20 GMT

Is there a way of exporting Application groups from one Panorama and importing to a different Panorama? I am trying to move my groups over for a GPCS POC.

NOTE: GlobalProtect Cloud Service has changed to Prisma Access.

Re: Exporting Application Groups

Remo — Thu, 19 Jul 2018 21:32:25 GMT

There are some ways

Export your configuration from both panoramas, copy the part with the application(groups) from one panorama to the corresponding section of the configuration of the second panorama and import the configuration again
Use the cli (preferred with "set cli config-output-format set") and use configure mode to show all your application(groups). Copy this output and past it to the cli of the second panorama

Re: Exporting Application Groups

BPry — Wed, 18 Jul 2018 00:44:18 GMT

@kamorris,

OR if you want to use a feature that almost nobody even knows about let alone utilize, you can always use the built-in 'load config partial' command that will essentially merge two configuration files for you. I personally don't like it as much because I've seen a lot of people use it for something it's not designed to do....but this...this is exactly what it's meant to do 😉

Essentially you follow the following format and you can 'merge' (or 'replace' or 'add') the address-group section from one config file to the next, right on the box.

load config partial from <filename> from-xpath <source-xpath> to-xpath <destination-xpath> mode merge

I personally actually really like @Remo option number 1. BUT depending on how many address-groups we're talking about (and if you have to move over the address objects as well) this may be a better/faster solution for you.