topic Re: Can we export Security Policies and Service Objects to from Firewall to Panorama? in General Topics

Can we export Security Policies and Service Objects to from Firewall to Panorama?

m.hassan96 — Fri, 22 Mar 2019 10:49:37 GMT

Hi All,

I have configured some security policies and service objects on my lab environment which consists of VM-100 Firewall for ESXi running PAN OS 8.1.0. Can I export my settings to production environment which consists of 8 ESXi hosts, Panorama and VM-500 for NSX per host. Would I be able to export securuty policies from VM-100 for ESXi to Panorama which in turn would be implemented in VM-500 for NSX? They are runnung same PAN OS but their models are differnet so could it cause any problems?

Re: Can we export Security Policies and Service Objects to from Firewall to Panorama?

BPry — Fri, 22 Mar 2019 18:55:41 GMT

@m.hassan96,

You could simply do this with the XML configuration of both configurations. You would simply take the <security/> entries that you actually want to migrate over and copy and paste it into the other configuration. Then, simply 'import' the configuration to the target system and 'load' the configuration that you've saved and ensure that it validates.

Something to think about when doing this is if your zones and addresses actually line up with your production environment in your lab. If not, you'll need to ensure that you've updated the configuration to whatever you need for your production system.

Re: Can we export Security Policies and Service Objects to from Firewall to Panorama?

m.hassan96 — Sat, 23 Mar 2019 18:40:11 GMT

@BPry Thanks for the help, will try that