How to transfer security policies created on the device on Panorama?

Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to transfer security policies created on the device on Panorama?

L3 Networker


I'am planning to transfer security policies from the PAN FW to Panorama. First the policies was created on the device, but now we are planning to adopt a configuration model in witch we will only use Panorama to centrilize the management of policies and objects. So is there any methode to make the transfer easly (objects export, policies export...).



L4 Transporter

Hello Aisa,

currently there is no way to transfer policies from a Paloalto device to Panorama.

You will have to create the policies manually on Panorama.

A way to transfer device config to Panorama config was documented in the following paper:

This should help with your migration process.

L3 Networker

While migrating objects and rules to Panorama, make sure you are either rename the new objects and rules in Panorama or delete the old local objects and rules on the device.  The reason is that Panroama will be unable to push objects or rules named the same as objects and rules that already exist on the device.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!