Import config from firewall to panorama. Already exists in panoroma

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Import config from firewall to panorama. Already exists in panoroma

L1 Bithead

We have installed 3 firewalls to Panorama. Someone has configured the firewall in the firewall console so the config doesn't match with panorama. I want to import the configuration but the device is not shown in the import because the firewall is already a member of the device group and template group. 

1 accepted solution

Accepted Solutions

L3 Networker

Hi,

 

Adding existing Firewalls is different from adding brand new (default config/factory default) firewalls.

these are the steps:

1. Addition of a pre-configured firewall to Panorama is the same as adding a new firewall. Add the serial number of the firewall under

Panorama > Managed Devices > Summary.

2.In Panorama, import the firewall’s configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama.

3. Make changes to the imported firewall configuration within Panorama.

4. Commit the changes you made to Panorama.

5. Push the new, modified configuration from Panorama down to the firewall under

Panorama > Setup > Operations > Export or push device config bundle.

This process will replace the existing configuration on the target firewall with a configuration that is managed by Panorama.

 

as a note before adding we should properly like

•Proper plan Device Groups and Templates.

•Reduce duplication of configuration.

•Streamline management of shared settings.

•Match firewall and Panorama versions.

•Identify the configuration to be managed locally on firewalls.

•Apply consistent zone names.

 

https://www.youtube.com/watch?v=5N4KuXTcpYI

https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/manage-firewalls/transition-a-firewall...

 

Best Regards,
Suresh

View solution in original post

1 REPLY 1

L3 Networker

Hi,

 

Adding existing Firewalls is different from adding brand new (default config/factory default) firewalls.

these are the steps:

1. Addition of a pre-configured firewall to Panorama is the same as adding a new firewall. Add the serial number of the firewall under

Panorama > Managed Devices > Summary.

2.In Panorama, import the firewall’s configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama.

3. Make changes to the imported firewall configuration within Panorama.

4. Commit the changes you made to Panorama.

5. Push the new, modified configuration from Panorama down to the firewall under

Panorama > Setup > Operations > Export or push device config bundle.

This process will replace the existing configuration on the target firewall with a configuration that is managed by Panorama.

 

as a note before adding we should properly like

•Proper plan Device Groups and Templates.

•Reduce duplication of configuration.

•Streamline management of shared settings.

•Match firewall and Panorama versions.

•Identify the configuration to be managed locally on firewalls.

•Apply consistent zone names.

 

https://www.youtube.com/watch?v=5N4KuXTcpYI

https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/manage-firewalls/transition-a-firewall...

 

Best Regards,
Suresh
  • 1 accepted solution
  • 3693 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!