Panorama: Bulk Edit Security Policy to update Security Profile Group

[DanielBostock]

Hi,

I have about 900 rules spread across 2 different groups within Panorama. I would like to apply a shared Security Profile Group to all these rules where there action is Allow. 

I have done some searching around but have not found any answers, however I apologise up front if I have missed a post (or article) where this has already been answered.

I am not very familiar with using API's (or through a script or XML) so if that is the answer, if I can please have some helpful beginner information here on how to achieve this through a script that would be great, but if there is a GUI process then that is preferred.

Thanks.

[S.Cantwell]

Daniel

What happens if you took a profile (and the group) and cloned them?

I think in the GUI, when you clone, it gives you the option to make that profile shared.

when all profiles are shared, you can clone the group (and also make it shareable)

now, you should be able to have a shared profile (and groups) across your 2 device groups.

questions?

let me know.

[nagarjuna.b]

Hi @DanielBostock 

best way to do this really quick is by using expedition tool. There is an option called multi edit and you can apply profile group to all the rules or only for selected rules.

Regards,Nagarjuna 

[DanielBostock]

Thanks for the information here guys.

I don't know much about expedition at this moment, my 3 second understanding of the tool was it is an import tool for rules from ASA to Palo. Expedition was what was used to get all the rules here in the first place I am now told, I did not know however retroactively rules could be updated or edited with the tool. 

I will now spend some time today investigating it further and see how this could resolve the issue for us and respond here after this.

Appreciate the help guys!

Thanks,

Daniel.