SRX to Panorama export mappings question

Showing results for 
Show  only  | Search instead for 
Did you mean: 

SRX to Panorama export mappings question

L4 Transporter



I have converted all objects to Shared and this picture illustrates what I think is the correct mappings of each element.  Please confirm/correct as necessary.  Thanks!




L4 Transporter

Well, I tried that and I don't think it's working correctly.


I guess I need step-by-step assistance on what to do from that pre-merge screenshot.  While I did have a pretty lengthy thread on all of the problems I had with an ASA conversion last year, that thread isn't helping me here.  Nothing is working as expected.


Actually, perhaps starting at the beginning would help - do I only choose Panorama or do I also select the target firewall cluster?  That point wasn't covered in the ASA video series as it was firewall to firewall with no Panorama.


Was I correct in converting all objects to Shared?

Hello @justamoment 


I am not sure how a object can be shared in the SRX platform but you would need to first migrate over the objects into the Panorama device and merge it then convert it to shared since that is what we use on our end. I think you may have first made it shared within the SRX environment then tried to merge it which will not work.

L4 Transporter

Ok.  I have lots of snapshots pre-merge so let me check for that.


Do I have the mappings correct in the screenshot except for the Objects?  If the Objects are wrong (shouldn't go to shared), where do I put them?  The new cluster's DG?


Also, while the SRX doesn't do Global rules (zone-less), it does have what are called Global objects but I don't know if that's the same thing as PAN's Shared objects (all of our SRX objects are Global).

Hello @justamoment 


That is fine you should be able to just dump them into the shared section with no problems unless you were planning on not having them become a shared object.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!