How to transfer security policies created on the device on Panorama?

[asia]

Hello,

I'am planning to transfer security policies from the PAN FW to Panorama. First the policies was created on the device, but now we are planning to adopt a configuration model in witch we will only use Panorama to centrilize the management of policies and objects. So is there any methode to make the transfer easly (objects export, policies export...).

Asia.

[swhyte]

Hello Aisa,

currently there is no way to transfer policies from a Paloalto device to Panorama.

You will have to create the policies manually on Panorama.

[mschuricht]

A way to transfer device config to Panorama config was documented in the following paper: https://live.paloaltonetworks.com/docs/DOC-1545

This should help with your migration process.

[rnitz]

While migrating objects and rules to Panorama, make sure you are either rename the new objects and rules in Panorama or delete the old local objects and rules on the device.  The reason is that Panroama will be unable to push objects or rules named the same as objects and rules that already exist on the device.