Exporting shared rulebase

[rwendt]

I am in the process of converting our Juniper SRX's to Palo Alto's.

During the process I reorganized some of the security rules and converted them to shared pre rules.

When I export the configuration it doesn't seem to get these rules? It looks like I can only export vsys1 rules?

Am I doing something wrong or is this not supported?

[lychiang · Accepted solution]

@rwendt if you convert the policy to share ,  you won’t see it in the pan-OS config , so leave it in vsys1 and you can drag it to the shared folder on the panorama config during merge . 

[rwendt]

Thanks for the reply ill do that

[rwendt]

Can you move it back to vsys1 after moving it to shared?

[rwendt]

Nevermind. I manually changed the values in the mariadb database. 😄

[rwendt]

@lychiang I don't want all the policies shared, only some of them. It doesn't seem like there is a way to do this. Is shared policies something thats being worked on? It seems kind of pointless to have an option to convert to shared if you can't do anything with them?

[lychiang]

@rwendt, 

When you merged with the PAN-OS base config, you could drag all rules to vsys1 on the right , after you merged,  you could select the rules that you want to convert to share and right click -> Rule action -> Converted to shared . What I trying to say is don't convert the rule to shared before you merge with the PAN-OS base config. 

[rwendt]

oh ok that makes sense. I'll give that a try.

Thanks again.