How to do hardware refresh of a hub firewall(HA) in a PAN-OS SDWAN setup connected to a lot of branches

[BrianPedersen]

Anyone got any suggestions how to do this without loosing the branches?

I mean, it is pretty easy to migrate to a new platform if you got "normal" ipsec tunnels but when using SDWAN that config are made by Panorama when adding fw's to the SDWAN Cluster in Panorama.

So how to replace old firewall cluster with new one without loosing the Panorama SDWAN generated ipsec tunnels that makes all branches to disconnect Panorama and datacenter

[ecraig]

This sounds like PAN-OS SDWAN rather than Prisma SD-WAN.

You might try posting this in one of the NGFW/PAN-OS discussion groups.

[BrianPedersen]

Your right but I didn't put it here. I wrote in general topics and can see that configuration would have been better but I don't know how to move this posting 😞

[ecraig]

Are you able to access:

live.paloaltonetworks.com > Discussions > Configuration Discussions > Next-Generation Firewall Configuration Discussions

or

live.paloaltonetworks.com > Discussions > Configuration Discussions > Panorama Configuration Discussions

And just copy your question as a new post there?