topic Re: How to output and input the Palo alto security policy to other one PA device? in General Topics

How to output and input the Palo alto security policy to other one PA device?

Spark_Jiang — Sat, 21 Dec 2019 07:39:16 GMT

we have a lot of the same security policy want to transfer to branch office,any method I can output and input the Palo alto security policy to other one PA device? just like cisco swith CLI, maybe "show security policy....." in old one, and "set security policy..." in new one, that will be convenience for setup new one.

Re: How to output and input the Palo alto security policy to other one PA device?

MustafaOzturk — Sat, 21 Dec 2019 14:44:38 GMT

Dear Spark,

maybe the document is helpful for you.

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-cli-quick-start/use-the-cli/load-a-partial-configuration

bestly,

Re: How to output and input the Palo alto security policy to other one PA device?

S.Cantwell — Sat, 21 Dec 2019 15:54:11 GMT

From CLI... if you dont mind the cut and paste.. you would go into Configure mode.

#run set cli config-output-format set

show rulebase security rules

this will show you all the rules you have in set notation... copy and paste away, as long as you have all address objects, zones, service ports, applications, security profiles/groups, all already on the other FW.

Re: How to output and input the Palo alto security policy to other one PA device?

Spark_Jiang — Sun, 22 Dec 2019 09:08:08 GMT

this is what I want, thanks Bro.

Re: How to output and input the Palo alto security policy to other one PA device?

Spark_Jiang — Sun, 22 Dec 2019 09:15:57 GMT

thank you , it also help me to know the CLI, I'm read it now.