- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
10-11-2011 07:38 AM
We are getting ready to start using multiple VSYS on our PA. Want to find out if there is a way to move or copy policy and objects from one VSYS to another?
We have many policies in our original VSYS1 and want to move those policies and objects into the new VSYS which are now going to be configured for different Divisions in our organization.
10-12-2011 04:22 PM
It's a little tricky but I was able to use XML Notepad to accomplish some of the tasks. Albeit, I had to create the 2nd vsys and make sure the zones matched. So for instance, I exported the running-config.xml after creating the 2nd vsys. I opened the file with XML Notepad. I copied the rulebase folder from the vsys1 entry and pasted it to the vsys2 entry. Saved the configuration and named it something different. I then imported the config as a snapshot and loaded soon thereafter. Noticed the rules are now present for vsys2. This should be a plausible solution for objects as well. Provided a screenshots to this thread.
-Renato
10-12-2011 04:22 PM
It's a little tricky but I was able to use XML Notepad to accomplish some of the tasks. Albeit, I had to create the 2nd vsys and make sure the zones matched. So for instance, I exported the running-config.xml after creating the 2nd vsys. I opened the file with XML Notepad. I copied the rulebase folder from the vsys1 entry and pasted it to the vsys2 entry. Saved the configuration and named it something different. I then imported the config as a snapshot and loaded soon thereafter. Noticed the rules are now present for vsys2. This should be a plausible solution for objects as well. Provided a screenshots to this thread.
-Renato
10-13-2011 11:19 AM
Thanks looks like this will work. Your right it can get a little tricky but it does work. Can be time consuming copying what you need from one vsys to another but cuts down the time it would take to recreate the rules and objects.
10-13-2011 11:37 AM
totally agree with you there!
:smileygrin:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!