How to output and input the Palo alto security policy to other one PA device?

[Spark_Jiang]

we have a lot of the same security policy want to transfer to branch office,any method I can output and input the Palo alto security policy to other one PA device? just like cisco swith CLI, maybe "show security policy....." in old one, and "set security policy..." in new one, that will be convenience for setup new one.

[MustafaOzturk]

Dear Spark,

maybe the document is helpful for you.

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-cli-quick-start/use-the-cli/load-a-partial-confi...

bestly,

[SCantwell_IM · Accepted solution]

From CLI... if you dont mind the cut and paste.. you would go into Configure mode.

#run set cli config-output-format set

show rulebase security rules

this will show you all the rules you have in set notation... copy and paste away, as long as you have all address objects, zones, service ports, applications, security profiles/groups, all already on the other FW.

[Spark_Jiang]

this is what I want, thanks Bro.

[Spark_Jiang]

thank you , it also help me to know the CLI, I'm read it now.