About FilipElsen

Hi @lychiang,   Yes - indeed. The base config is the one from 9.1.2.   When importing the merged config: OK. When loading the imported config, we select: - Load shared objects -Select device group & templates: only the specific DG (MGT) has been selected. The policy is loaded, but sources & destinations (objects) + services are missing. Best regards, Filip ... View more

Hi @lychiang @dgildelaig  With PanOS 9.1.2 the import itself works, the configd restart error is solved. Nevertheless it takes a lot of time. When reviewing the policy, we noticed that again the source/destination/service objects got lost, even though the are found into the XML. Example 1 Expedition Panorama   Example2: Expedition Panorama   I've made a search in the XML for "rule 229" above, but this seems to hold the correct values. Seems like compatibility is lagging with PanOs 9.1.X. We're blocked on our migrations. Can you please shine a light?   Thanks a lot, Filip Elsen ... View more

Hi @lychiang @dgildelaig @DamienDove , Our Panorama's have been upgraded from 9.1.1 to 9.1.2. The merged config file has been imported, it takes a while! 2020/06/04 16:08:13   16:08:13       186939                                  BuildXMLCache                            ACT   PEND        47% 2020/06/04 16:07:26   16:07:26       186938                                  BuildXMLCache                            ACT   PEND        69% 2020/06/04 16:06:48   16:06:48       186937                                  BuildXMLCache                            ACT   PEND        93% 2020/06/04 16:06:13   16:06:13       186936                                  BuildXMLCache                            ACT   PEND        99% 2020/06/04 15:29:33   15:29:33       186935                                           Load                            ACT   PEND        99%   In total it took about 35 minutes that the process was on Load / PEND at 99%. In the end, the import worked.   Thanks a lot for the solution! Best regards, Filip Elsen ... View more

 Hi @lychiang, @dgildelaig  We have an M500 cluster with full disk extension. I was never a big fan of the "partial" and it showed off again today. While loading the partial config, the primary Panorama became unresponsive and I needed to failover & revert. Such symptoms I encountered in the past, therefore I avoid to do it like this command. It has been going fine for +1Y and we've performed about 21migrations (Checkpoint Central policy sent to 2 different datacenter clusters, which brings quitte some complexity (routing, nat, auto-zone assign etc). (Spoke @dgildelaig about this during an event).   I've provided the export of the project, the merged xml. Can you please shine your wisdom on it? Best regards, Filip   ... View more

Hi Didac, Right! We don't do this command often, which is good 🙂 Best regards, Filip ... View more