Populating Panorama from an existing firewall.

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Populating Panorama from an existing firewall.

L2 Linker

We have a lab PA2050 that I have tweaked to exactly where I want it to be. We are now trying to add it to a lab Panorama and I would like to populate Panorama with all of the policies and objects from the lab 2050. I exported the running config to an xml and imported it to the Panorama instance and just changed the server information (IP, gateway, DNS servers, etc...) It kept spitting up errors about administration.

Without modding the xml by hand, is there an easy way to import the policies and objects from the 2050 in Panorama?


According to the such feature request is done already a year ago.

It's actually very strange, that vendor, whose only product is firewall, is so behind with common features, that every other firewall vendor have. PaloAlto must do serious jump, as right now I feel that simple the term "next generation" doesn't ring the bell anymore.

Also others vendors have made progress. I almost regret moving from CheckPoint to PaloAlto as I miss so much common features...

Palo Alto Networks Guru

I am really sorry to hear that ksuuk.  We are constantly evaluating feature requests and although, this is an important feature, there is a work around with the script.   Hopefully once you do the import, you will find that the UI is intuitive and easy to use.  With that said, your feedback is important, and contacting your SE to re-enforce the request is the best way for product management to prioritize features for future release.  Thank you and please know we are listening.  Thank you,


Not applicable

This is a much needed feature..  Why?  Because most people buy the firewalls first and as they buy more they see a need for Panorama.  Well it is hard to use Panorama to it's fullest features when you can't import the current devices configs to the Panorama Server.   It is very hard to manually put all that into Panorama especially with policies and tons of url and address objects.

I really, sincerely hope this feature request was implemented in Panorama 6.0.

It's ridiculous  that a centralized management solution created by a firewall company isn't able to import device configs. I feel this concept should have been included on a feature requirements document that was incorporated into Panorama 1.0 honestly, not that we're still going to be waiting for it in 2014.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!