Issue migrating devices FWs (panorama)

[BigPalo]

I have configured some Palo alto to replace old ones. I exported the configuration of the old ones and ran it through Expedition to generate an XML in the new version that runs on the new computers. The problem I have is that when I make a commit I get an error because it has a lot of “inherited” configuration from Panorama, all the shared objects are not being used or should not be used, Panorama is only used for logs and little else, but I cannot install policies.
I have put the new devices in Panorama and I have tried to do a push so that it imports the shared objects and thus be able to install policies, but it does not work either, do you know if there is a way to import the xml and not take into account the shared objects that are in Panorama?

I do not know if it is possible to do it when exporting the configuration or something similar, I have not been able to do it in expedition and I have configured the computers by hand, but all the policies and objects have to be added and by hand it would take weeks of dedicated work, can you think of anything?

[stacey45]

---

@BigPalo wrote:

I have configured some Palo alto to replace old ones. I exported the configuration of the old ones and ran it through Expedition to generate an XML in the new version that runs on the new computers. The problem I have is that when I make a commit I get an error because it has a lot of “inherited” configuration from Panorama, all the shared objects are not being used or should not be used, Panorama is only used for logs and little else, but I cannot install policies.
I have put the new devices in Panorama and I have tried to do a push so that it imports the shared objects and thus be able to install policies, but it does not work either, do you know if there is a way to import the xml and not take into account the shared objects that are in Panorama?

I do not know if it is possible to do it when exporting the configuration or something similar, I have not been able to do it in expedition and I have configured the computers by hand, but all the policies and objects have to be added and by hand it would take weeks of dedicated work, can you think of anything?

---

To import Palo Alto configurations without inheriting unnecessary Panorama objects, consider manual configuration, selective import with Expedition, or optimizing Panorama settings. Uncheck "Share Unused Address and Service Objects," use device groups and templates, and leverage scripting for automation.