Import config from firewall to panorama. Already exists in panoroma

[Navaneetharaj]

We have installed 3 firewalls to Panorama. Someone has configured the firewall in the firewall console so the config doesn't match with panorama. I want to import the configuration but the device is not shown in the import because the firewall is already a member of the device group and template group. 

[Mudhireddy · Accepted solution]

Hi,

Adding existing Firewalls is different from adding brand new (default config/factory default) firewalls.

these are the steps:

1. Addition of a pre-configured firewall to Panorama is the same as adding a new firewall. Add the serial number of the firewall under

Panorama > Managed Devices > Summary.

2.In Panorama, import the firewall’s configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama.

3. Make changes to the imported firewall configuration within Panorama.

4. Commit the changes you made to Panorama.

5. Push the new, modified configuration from Panorama down to the firewall under

Panorama > Setup > Operations > Export or push device config bundle.

This process will replace the existing configuration on the target firewall with a configuration that is managed by Panorama.

as a note before adding we should properly like

•Proper plan Device Groups and Templates.

•Reduce duplication of configuration.

•Streamline management of shared settings.

•Match firewall and Panorama versions.

•Identify the configuration to be managed locally on firewalls.

•Apply consistent zone names.

https://www.youtube.com/watch?v=5N4KuXTcpYI

https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/manage-firewalls/transition-a-firewall...