12-10-2023 11:11 PM
I need to move many policies from 2 PA firewalls to another new PA firewall.
What's the easier way to do that?
The new PA firewall has it's own configuration. So I can't just simply do export and import xml.
12-10-2023 11:58 PM
Hello @YeungHing
First of all Expedition tool is intended to help on migrations from 3rd party vendors and also to optimise the security posture on a PANOS device. Not for PA to PA migrations.
With the situation you described you can try to use the Export via Api Calls functionality of Expedition. You can import de PA's config and generate the api calls to send the policies to the firewall, either all of them at once or one by one.
However then you need to make sure that you send to the firewall all the objects needed in the rules as well, if not when you try yo commit the config is going to be wrong
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
