I have two groups in Application Groups, every one has over 60 applications on lists.
I need to recreate the same settings on another PA device - how to do it?
Solved! Go to Solution.
l think you can export running configuration and change/edit using notepad++. I don't really know if this is the quickest way but will work I believe
From what I've seen modifiying the configuration by exporting, altering, then importing and commiting is the quickesst/only way to actually achieve this. The process is fairly easy and shouldn't be all that complicated. That being said make sure that you move over anything in the config thats being referenced so it'll actually work.
You can just go into the cli of the source PA and copy the application group. Then paste it into the destination PA.
I find this command helpful when using the cli
> set cli config-output-format set
Then when you show the config on the CLI, it's easier to read and copy. (It's easier for me to read at least)
# show | match application-group
Using "show | match application-group" I listed both my groups. Thats OK
But how to import it to group test_group on new device?
You can just paste it directly to the new one.
When you use the 'set cli config-output-format set' you can just paste the group in with the set format.
set application-group test_group [ app1 app2 app3 ]
As soon as you finish entering the command, you will see the group in the GUI.
Before I had Panorama, I had to copy large groups to several firewalls so I found a small formatting issue. Because you have 60 apps in the group, make sure that there aren't any incorrect spaces or line breaks in the list when you paste from your text editor. Sometimes with copy and paste, the application names get cut in the middle.
Below is an example of what can happen. Note how fasttrack is cut in the middle of the app name. The PA CLI parser will give an error if you try to paste this. Just remove the space in the app name and it will be fine. With a group of 60, you might have 4 or 5 lines to fix.
set application-group Apps1 [ dl-free flashget qq-download vagaa xunlei zbigz 100bao allpeers ants-p2p applejuice ares axifile direct-connect emule fasttr
ack fileguri filemail
Just a quick one! Do you know what are these options:
> set cli config-output-format
What is a difference between them? Cannot see any changed by changing them
>set cli config-output-format set
You have to go to configure mode.
And when you give command show there you see configuration in set commands.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!