topic Re: Backup and Restore PA Panorama and Firewalls setup to new infra in Azure in General Topics

Backup and Restore PA Panorama and Firewalls setup to new infra in Azure

SajithkumarPS — Tue, 20 Apr 2021 17:55:21 GMT

Hi friends,

Want to setup a parallel infra for current production environment where current configuration should be used in new VMs(Panorama and Two Firewalls) . How can we export only current security policies ,objects, and import to new setup (manually creating 400 policies will be difficult) ?. New setup already have different basic configurations like mgmt ip address, interface IPs etc which are already assigned by Azure team IRM templates). Whether the snapshot from older firewall VM and edit, upload steps will work in Azure VMs. Please share your thoughts,KB links related this scenario where whole setup is in Azure.

Thanks in Advance

Re: Backup and Restore PA Panorama and Firewalls setup to new infra in Azure

OtakarKlier — Wed, 21 Apr 2021 21:55:18 GMT

Hello,

The config file for the PAN is just an XML file. You can export the config you want, then just remove the parts you dont want and import it into your new PAN candidate config. Then it will overwrite only the parts you wanted/imported.

Hope that makes sense.

Regards,

Re: Backup and Restore PA Panorama and Firewalls setup to new infra in Azure

nikoolayy1 — Fri, 23 Apr 2021 07:34:08 GMT

Also check if the Expdition/Migration tool can help?

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool