How to update the policy in a project

[Esfeld]

I used expedition to provide me with information.  I manually added rules to the firewall.  When I go back to expedition and re-import the device config, it still shows me all of the same old rules.  I tried re-importing under devices and from within the project.  I also deleted and recreated the project with the same result.  How do I refresh the policy?

[Arne-VDH]

Have you gone, outside of a project, to devices -> choose your device -> contents -> "retrieve contents" & save first?

[Esfeld]

Yes.  It is Panorama managed, so I retrieved contents on Pano, retrieved devices, and then even retrieved contents on those devices (even though it should be almost nothing).  I then did the import in the project.  Same result.

[Arne-VDH]

Then AFAIK you need to base your project on the Panorama config (and import the panorama configuration), not the firewall configuration. The Panorama pushed policies are not present in the firewalls running-config.xml or candidate config either, so it's logical the expedition tool can't retrieve them either. Vice versa, you will push your changes using API calls to Panorama and from Panorama to the device.

[Esfeld]

"you need to base your project on the Panorama config (and import the panorama configuration), not the firewall configuration."

This is what I am doing.  I have not had this problem previously.