I need to add a vsys to migrating configuration in expedition

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

I need to add a vsys to migrating configuration in expedition

L1 Bithead

Hello all,


I am migrating a Juniper SRX to an existing Palo Alto firewall that is managed by Panorama. I have an Expedition instance able to read the Panorama and attached devices via API. My thinking is to separate the two firewall configurations into two separate logical entities, vsys1 would be for the existing Palo Alto firewall configs, vsys2 would be for the SRX configurations. I have both the Palo Alto and SRX configurations loaded into expedition but I try to add a new vsys under the device > virtual systems and then hit the + button but I don't get any option to add the vsys. Just a dropdown from the bottom bar which mentions something about templates. 

Untitled 2.jpg

I'm sure this is expected but I need some help getting past this. What steps am I missing?


L6 Presenter

Hi @Kevin_Osemene @I would suggest add device group , vsys and template in the panorama before you export it out and import it into the expedition. 

Ok yeah that is what I was missing to keep these devices logically separated. But import/export is done with the API and I show the following:

Untitled 33.jpg


I have to pull in the entire panorama config to merge configuration. If I make the new DG/Template/vsys, I will still run into the same problem as before, no?

Hi @Kevin_Osemene 


Once you move your migrated configuration to your created DG/Template/Vsys, you can import them to your device using load partial configuration command: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-cli-quick-start/use-the-cli/load-configurations...


Hope this helps,


Best regards,



  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!