Config (XML) import to device, using Panorama

[wimjuste]

, XML

Dear all,

The Panorama feature "Scheduled Config Export" is a great way to backup all device configs to a central backup repository.

I known one can import this XML config from the device itself,

But would there also be a way to import  the complete XML files to respective device USING panorama?

Thanks,

Wim

[torm]

It's not to possible do a "device config import" from Panorama, as far as I know. Panorama can only push device group and template configuration, not the whole XML file.

I guess maybe it will be possible to write something with the API to do something similar.

[ksteves1]

there is a package called PAN-ksteves on DevCenter with a program

called panto.py that may be useful and uses the panxapi program from

PAN-perl.  Here is a section from the documentation:

panto.py can be used to assist with the process of migrating PAN-OS

device and VSYS configurations to Panorama.

Its input is a configuration file which specifies the XPath nodes on

the PAN-OS device to migrate, and the corresponding XPath node on the

Panorama where the configuration will be migrated to. Its output is a

set of panxapi commands that can be selectively executed which use the

XML API to show and delete the configuration on PAN-OS, and set the

configuration on Panorama.

Sample input:

migrate from-xpath /config/shared/log-settings/email to-xpath /config/shared/log-settings

Sample output:

# migrate from-xpath /config/shared/log-settings/email to-xpath /config/shared/log-settings

panxapi -t pa-200 -sxr "/config/shared/log-settings/email" >tmpnNeNjR_email.xml

panxapi -t panorama -S ./tmpnNeNjR_email.xml "/config/shared/log-settings"

panxapi -t pa-200 -d "/config/shared/log-settings/email"