Migrating PA Policy to another PA Firewall

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Migrating PA Policy to another PA Firewall

L1 Bithead

I need to move many policies from 2 PA firewalls to another new PA firewall.

What's the easier way to do that? 
The new PA firewall has it's own configuration. So I can't just simply do export and import xml.  



L2 Linker

Hello @YeungHing 

First of all Expedition tool is intended to help on migrations from 3rd party vendors and also to optimise the security posture on a PANOS device. Not for PA to PA migrations.

With the situation you described you can try to use the Export via Api Calls functionality of Expedition. You can import de PA's config and generate the api calls to send the policies to the firewall, either all of them at once or one by one.

However then you need to make sure that you send to the firewall all the objects needed in the rules as well, if not when you try yo commit the config is going to be wrong

  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!