topic Re: moving policies and objects to another device group in General Topics

moving policies and objects to another device group

james.gilliand — Mon, 30 Jul 2018 22:12:25 GMT

Policies and objects are currently in the wrong device group. able to move everything successfully except for the address objects. i feel the move is pretty self-explanatory, but i have taken the time to read the user guide and still no luck. is there some particular order this needs to be done? any assistance would be appreciated.

Re: moving policies and objects to another device group

Philip_Wiberg — Tue, 31 Jul 2018 10:04:24 GMT

What happens with the address objects during the move? What is the error?

You can always extract the set commands from the cli:

> set cli config-output-mode set

> configure

# show device-group <DG-Name> address

Then replace the incorrect Device Group with the new Device Group name and just paste them in, in case you need a second way to do it.

Re: moving policies and objects to another device group

BPry — Tue, 31 Jul 2018 13:57:49 GMT

@james.gilliand,

Personally I would do this straight through the XML configuration file or the migration tool. Fastest way to get something like this done.

Re: moving policies and objects to another device group

JoeAndreini — Tue, 31 Jul 2018 15:05:53 GMT

@Philip_Wiberg wrote:

What happens with the address objects during the move? What is the error?

You can always extract the set commands from the cli:
> set cli config-output-mode set
> configure
# show device-group <DG-Name> address

Then replace the incorrect Device Group with the new Device Group name and just paste them in, in case you need a second way to do it.

I find this the easiest method for most people.

editing teh XML is powerful, but many people find it intimidating and it can be easy to make a mess of it for the inexperienced. Most network admins/engineers are familiar and comfortable with "set" commands and editing them.

Re: moving policies and objects to another device group

Lora — Tue, 31 Jul 2018 19:21:33 GMT

You can easiyly do this with the new Expedition tool. Global search and replace from one device group to the other or make them all shared so you can use them on all device groups if that makes sense.