Importing and removing Existing config into Panorama

Presented by: Nick Travis SLED SE
In this video, we provide a demo of how to take a firewall from an existing config and importing that into Panorama, so it can be managed in Panorama. Follow along as we walk you step-by-step of the importing process.
For additional information on importing a firewall into Panorama, please visit the following articles:
How to Perform a Device Config Import Into Panorama - Knowledge Base
knowledgebase....
How do I delete imported configurations from Panorama? - LIVEcommunity Discussion
live.paloalton...
Transition a Firewall to Panorama Management - TechDocs
docs.paloalton...

[@earlford2805]

Great video! You may want to add a section showing that after the export and push to the device, there are A LOT of overrides that show up on the actual firewall under the Network and Device tabs that need reverting so that the firewall is totally under Panorama control. This can be tricky because some of these override reverts need to be done in sequence especially with regard to the network interfaces, virtual routers, and DHCP settings. Adding some mention of this to the video would be very helpful I think.

[@osmansalah7687]

Thank You, Great explanation hope to see like this Video soon

[@MohammedWaseemRajaChanda]

Superb !!!

[@vainilk78]

Thank you that was great.

[@nileshpardeshi6279]

very helpful..thank you

[@PaloAltoNetworksLiveCommunity]

Hi Nilesh, glad it was helpful! Thank you

[@shankarganeshanbazhagan4640]

Thanks Nick Travis, Question on New Panorama Migration, Is it possible to not import templates but only device group configuration, if that is possible should i leave the template name as empty, @03:20 If it is not possible, despite new template & template stack being created on panorama, i believe templates will not be pushed, If I already disabled device & network template locally on the firewall (panorama settings) when i changed to panorama ip address? Only network and device template will imported into panorama and never be exported back to the firewall, so i can simply remove the newly created template, template stack in panorama then commit ? Thanks.

[@jacksenesapable]

How do you uncheck associate device? Do I have to remove the firewalls from panorama then reimport them?

[@nicktravis5496]

If you already have them in Panorama you should be able to skip that step and move on to importing the config under Setup -> Operations.

[@le.g2bt]

What about the logs?

[@annaalve5726]

Hi, added the serial number and panorama IP and still shows disconnected. Please help😭

[@PaloAltoNetworksLiveCommunity]

Is the IP reachable/routable/blocked ? I'd encourage you to do some network connectivity debugging to begin with. Please refer to debugging articles/tips/tricks on the LIVEcommunity or ask for more advice on the LIVEcommunity discussions forum !

[@firewalllife]

I made a demo on Panorama Templates and Device Groups. Panorama Templates: kzbin.info/www/bejne/aavdZ2N4h8aJb6c Panorama Device Groups: kzbin.info/www/bejne/gqu4ZaeMrtBlb8k