I have a PA-3020 device that I would like to use Expedition to help me Audit and Evaluate. I can't give Expedition direct access to the FW, so I've been trying to import XML files. I can't seem to get a full import of everything on the firewall. I found this posting, but it didn't have a resolution: https://live.paloaltonetworks.com/t5/General-Topics/Issue-exporting-a-complete-configuration-out-of-Panorama-to-put/td-p/277415
In expedition, I create a Project. Then in the project I navigate to import, and under Palo Alto I've tried the following:
1 On the FW I tried, "Export named configuration snapshot". It imports just about nothing. Just has the management information and basic interface info (non of the sub-interfaces.) No rules, no objects.
2 On the FW I tried, "Export device state". But the files show as invalid "The content is not a valid PANOS configuration. No version Found:/home/userSpace/projects/test/toImport/template-config.xml.dat"
3 In Panorama, I tried "Export named Panorama configuration snapshot". This imports a lot of devices, but oddly not the devices I cared about.
4 In Panorama, I tried "Export Panorama and devices config bundle". Same problem as in 1.
Number 3 is the closest I've gotten to getting things imported, but I don't want everything in our Panorama. Just the firewalls I care about.
... View more