Exporting Application Groups

[kamorris]

Is there a way of exporting Application groups from one Panorama and importing to a different Panorama? I am trying to move my groups over for a GPCS POC.

NOTE: GlobalProtect Cloud Service has changed to Prisma Access.

[Remo]

There are some ways

1. Export your configuration from both panoramas, copy the part with the application(groups) from one panorama to the corresponding section of the configuration of the second panorama and import the configuration again
2. Use the cli (preferred with "set cli config-output-format set") and use configure mode to show all your application(groups). Copy this output and past it to the cli of the second panorama

[BPry]

@kamorris,

OR if you want to use a feature that almost nobody even knows about let alone utilize, you can always use the built-in 'load config partial' command that will essentially merge two configuration files for you. I personally don't like it as much because I've seen a lot of people use it for something it's not designed to do....but this...this is exactly what it's meant to do 😉 

Essentially you follow the following format and you can 'merge' (or 'replace' or 'add') the address-group section from one config file to the next, right on the box. 

load config partial from <filename> from-xpath <source-xpath> to-xpath <destination-xpath> mode merge

I personally actually really like @Remo option number 1. BUT depending on how many address-groups we're talking about (and if you have to move over the address objects as well) this may be a better/faster solution for you.