02-29-2024 08:19 AM
Thank you for reaching out.
In Expedition, you can manage Objects and Policies, which should be sufficient. However, please note that if your rules reference specific "zones", these zones must be declared in your device (Panorama). Otherwise, you will not be able to push or commit your configuration. The same applies to tags and other objects used in your Objects or Policies.
To ensure best practices, please follow these guidelines:
For network-related information such as interfaces and zones, use the "set" command on the CLI.
For objects such as tags, addresses, address groups, services, service groups, applications, routes, security rules, and NAT rules, use the "load partial mode merge" command on the CLI.
If you have any further questions, feel free to ask.
Thank you!
