I have imported the config of an existing 7080 (PANOS 8.1.13) into a new expedition project to see if i can analyze duplicate objects that can be potentially removed.
I'm not seeing what I expected though. In expedition there shows no Address Objects, Address Groups, Security Policies, very few Services (only 3) , but seems to have all the zones.
I also see for Address objets some "ghost" objects...my understanding was that you would see ghosts objedts when you migrated from a different vendor config file, but these were originally greenfield FW's when my client built them.
Full disclosure, I am importing the config that was exported from the FW, and the FW is managed by Panorama, so maybe that has something to do with it? But I would figure all the config info would have to be in the running config .xml (created a snap shot, and then exported).
My original concern in trying to find duplicate objects/etc is that my Panorama config is 12.9 meg, it's only managing 2 FW pairs...one pair has a config that is 1.2meg and the other pair has config that is 600k...not sure how the Panorama config got to be so huge.
Thank you for any insight.
... View more