topic Load Config Partial for Panorama Firewall Import in General Topics

Load Config Partial for Panorama Firewall Import

BatD — Mon, 10 Sep 2018 16:09:41 GMT

If anyone used it before, can you please share “load config partial” commands to import all configuration items from saved firewall xml config (fw1.xml) file into new Panorama template (e.g. template1) and new device group (e.g. dgropup1).

I can work out most of them, but have the feeling that I am missing some configuration items.

Re: Load Config Partial for Panorama Firewall Import

BPry — Mon, 10 Sep 2018 17:59:34 GMT

@BatD,

For what you are trying to do I would honestly recommend doing this by hand through the XML file directly and not using the 'load config partial' command.

Re: Load Config Partial for Panorama Firewall Import

BatD — Tue, 11 Sep 2018 07:00:57 GMT

Hi @BPry. Thank you for your response. I must be missing something. Can you please clarify how to import firewall xml config file to Panorama template and device group directly "by hand"?

I was only aware of the load config partial method, which worked quite well in the past, with the only drawback being that it is easy to miss configuration elements.

Re: Load Config Partial for Panorama Firewall Import

Remo — Tue, 11 Sep 2018 11:02:45 GMT

@BatD

Not sure if this question heads to a totally wrong direction, but do you only need the configuration in panorama to use for another firewall or do you want to change an existing firewall from local to panorama management?

Re: Load Config Partial for Panorama Firewall Import

BPry — Tue, 11 Sep 2018 12:59:50 GMT

@BatD,

Essentially you export your configuration from Panorama and then modify the XML file directly with the information that you require; you then simply reupload the XML file and load it into Panorama when you are done. Since it doesn't sound like you've worked with the XML file much, I would avoid it.

Working directly with the configuration file can be a powerful tool, but it also means it can fail quickly if you get formating wrong or stick the wrong information in the wrong place. Validation will usually catch any mistakes you make, but it's better to not take that risk unless you're actually comfortable with XML.

Re: Load Config Partial for Panorama Firewall Import

BatD — Tue, 11 Sep 2018 13:22:46 GMT

@Remo

I don't need to add the device to Panorama, but just to import the config file in the Panorama LAB device to review configuraiton or occasionally make changes and import it back to the firewalls.

In my suport and professional services work, I am often being sent configuratrion file by a customer without having direct access to the firewall. Noramlly I use the migration tool, however in some cases it is easier to work with the configuraiton when in Panorama.

Re: Load Config Partial for Panorama Firewall Import

BatD — Wed, 10 Oct 2018 06:51:12 GMT

Hello guys, any ideas on load partial commands for full import of firewall in Panorama?