This article can assist you in importing the policies of an existing Palo Alto Networks firewall into Panorama.
WARNING: The rule with the same name should be deleted on the Panorama. If the rule names are not unique, the commit will fail on the Panorama.
This can be done either by 'Push & Commit' or by 'Export.'
To Export the Configuration from Panorama back to the firewall:
Note: The above two options, ("Push & Commit" & "Export") are available only for firewalls running PAN-OS 6.0.4 and later releases.