Panorama Merge or migration

[LCMember4017]

Hello,

I do have 2 Panorama running with 7.1.9. 1 running with M100 physical and another one is VM. Both are having different device group , templete and devices.

I am looking for way to migrate all devices from M100 to VM. Is there any easiest/ safest way of doing it? Any help is highly appriciated.

[Remo]

Hi @LCMember4017

Right now I can think of two possibilities

1. PaloAlto Migration Tool
2. Manually merging the XML Configuration files

Actually I am not totally sure about possibility 1 with the migration tool so personally I would manually merge the config files. It actually shouldn't be a big deal, cause you can copy the templates and device groups from the configuration of your m100 into the corresponding place in the vm configuration. 

If you use them, you have to make sure that you also merge all the globally shared objects. This will probably be the biggest task and may be even better if you configure all of them on both panoramas before you start.

And if you also have certificates with private keys, accounts including passwords and or other configuration which some data is stored encrypted (e.g. RADIUS Server profiles) in the templates, you have to configure the same master keys on both panorama appliances.

If you do this correctly, the firewalls will still be in sync after you change them from the m100 to the vm panorama.

Hope this helps.

Regards,

Remo