Export part of ruleset (based on filter)

Reply
L3 Networker

Export part of ruleset (based on filter)

Say that i have imported a big ruleset (from junos), i have to split this ruleset i to multiple firewall (due to redisign)
Is there any way to export part of the ruleset (maybe be search The part i want)
L1 Bithead

Re: Export part of ruleset (based on filter)

I am starting down this same road of needing to break single existing config into multiple PA firewalls. Not sure yet how I will approach this but looking at Expedition so far I am not seeing the way.

L4 Transporter

Re: Export part of ruleset (based on filter)

For the current version you will need to follow these steps.

 

Create a project, import 2 base configurations (Base-FW1, Base-FW2)

Import the 3rd party configuration (review and make edits to the migrated configuration)

Create a snapshot

Merge the migrated objects and policies to Base-FW1

Cleanup the Base-FW1 configuration by deleting the policies that do not need to be added to Base-FW1

After deleting the unneeded policies, remove the unused objects

Generate the XML for Base-FW1 or send the configuration via API

(for Base-FW2)

Load the snapshot

Merge the objects and policies to Base-FW2

Cleanup the Base-FW2 configuration by deleting the policies that do not need to be added to Base-FW2

After deleting the unneeded policies, remove the unused objects

Generate the XML for Base-FW1 or send the configuration via API

 

L1 Bithead

Re: Export part of ruleset (based on filter)

Thanks for the plan. Will test this out in the next few days or sometime next week hopefully.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!