About swaschkut

to avoid manual cleanup of your configuration, there is already an automation script available since years, to help you there: PAN-OS-PHP https://github.com/PaloAltoNetworks/pan-os-php pan-os-php type=xml-issue in= api://MGMT-IP out=output.xml of course the output.xml must be loaded back into device: pan-os-php type=upload in=output.xml out= api://MGMT-IP loadafterupload ... View more

Sorry for updating this. Please be aware that pan-configurator was stopped, but continued under a new name and repository: https://github.com/PaloAltoNetworks/pan-os-php it has the same features set from pan-configurator, but already improved and extended. ... View more

Please be aware that pan-configurator project was replaced with PAN-OS-PHP; https://live.paloaltonetworks.com/t5/api-articles/pan-os-php-scripting-library-and-utilities/ta-p/404396 https://github.com/PaloAltoNetworks/pan-os-php PAN-OS-PHP had the same but already improved and extended feature set compare to pan-configurator. regards Sven ... View more

I just saw these comments related to pan-configurator. Please be aware that I continued pan-configurator under a new name and repository: https://github.com/PaloAltoNetworks/pan-os-php It has all the same functionality from the past, but more features and improved handling. I am also working on an PAN-OS-PHP API, PAN-OS-PHP GUI in additional to the still available PAN-OS-PHP CLI. To bring in some information about to answer the problem from March 2021, where it was not possible to download Panorama configuration. This problem is related to a PAN-OS problem and was fixed in May 2021 by Palo Alto Networks, but I also introduced a work around, if I am not mistaken at this time also public in pan-configurator. For any feature request, please feel free to open an Github issue. Regards Sven ... View more

the mentioned Sonicwall migration script will be available within Expedition 2.0. Please be aware that until now no EXP config exported config is supported and also Sonicwall version is limited to <6.5 Sonicwall config export must be done this way: 1) login via SSH 2) no cli pager session 3) show current-config ... View more

yes, with exporting the candiate-config and a reimport of the same, the Panorama DB which hold the configuration is refreshed. Please be informed that this issue you are running into, is not an Expedition issue. So we from Expedition team can only give you advise how you can use the work around, so that you can continue your work. For more problem solving part please open a Palo Alto Networks Tac case related to PAN-OS API. regards Sven -------------------- Solutions Engineer - Expedition ... View more

HI John,   can you please reach out to us via: fwmigrate@paloaltonetworks.com   thanks Sven ... View more

  @ncalderon can you please explain both parts a little bit more closure: 1) what is your exact expectation? 2) do you have an explicit vendor in mind? or is this a general request? ... View more

Hi, please reach out to use via fwmigrate@paloaltonetworks.com We will find a way for secure sharing the config. regards Sven ... View more

as mention the tool is underdevelopment but you can of course ping me via mail and I will send you the installation instructions plus the tool itself.   fwmigrate@paloaltonetworks.com   regards Sven ... View more

 for the Sonicwall Config export, please follow the following CLI way: 1) login via SSH 2) no cli pager session 3) show current-config   with this you can work with the existing script to generate a CSV. But we are already working on an BETA script, which is not publish yet.   regards Sven  ... View more

HI,   we like to get more information about your Cisco ASA configuration and version you are figuring out this issue. Can you please get in touch with us via fwmigrate@paloaltonetworks.com or send me a private message here?   regards Sven Waschkut Solution Engineer, Expedition ... View more

Hi,   this is an easy one 🙂 if you have installed your pan-configurator following the installation documentation then you can use the following alias:   pa_download-predefined in=api://[MGMT-IP]   the script check if your firewall has a newer predefined.xml version, if yes it will download and replace the one available on your pan-configurator environment.     regards Sven ... View more

regarding the solution mentioned above by using the pan-configurator:   I recommend the util script which are coming with the pan-configurator: php service-edit.php in=api://[DEVICE-MGTM-IP] actions=delete 'filter=(object  is.unused.recursive )'   With this your changes are done against the configuration available on your Palo Alto Networks firewall. It is also possible to manipulate an offline PAN-OS config file: php service-edit.php in=[INPUT-FILE].xml out=[OUTPUT-FILE].xml actions=delete 'filter=(object  is.unused.recursive )'   ... View more