Migrating multiple HA pairs to Panorama

Hurtolak — Tue, 12 Mar 2019 10:30:21 GMT

Hello,

We need to migrate multiple firewall clusters to Panorama. I read the guides but there are still some questions about objects and IP addresses, certificates, etc...

Once I have migrated one cluster, what about the other ones if they have some objects with the same IP addresses (local networks, DMZ, etc..). Will they be imported ? Do I need to modify them first ? What about any certificate already existing ?

How do I rollback in case of trouble ?

In other words what are the best practices when migrating several HA pairs to Panorama ?

Thank you very much for your help.

Re: Migrating multiple HA pairs to Panorama

jeremy.larsen — Fri, 22 Mar 2019 19:54:56 GMT

There are best practices guides on this at https://docs.paloaltonetworks.com/panorama

The important thing to remember about rollback - TAKE A SNAPSHOT FIRST!

Save	Save named configuration snapshot

If everything goes belly up, you can just revert to the snapshot and all changes will be rolled back.

topic Re: Migrating multiple HA pairs to Panorama in General Topics

Migrating multiple HA pairs to Panorama

Re: Migrating multiple HA pairs to Panorama