A company with already deployed Palo Alto firewalls has purchased their first Panorama server. The security team has already configured all firewalls with the Panorama IP address and added all the fir

Question

Options

• AUse API calls to retrieve the configuration directly from the managed devices.
• BExport Named Configuration Snapshot on each firewall followed by Import Named Configuration
• CImport Device Configuration to Panorama, followed by Export or Push Device Config Bundle.
• DUse the Firewall Migration plugin to retrieve the configuration directly from the managed devices.

• A
  8% (3)
• B
  5% (2)
• C
  73% (29)
• D
  15% (6)

Explanation

When onboarding existing firewalls (with their own running configurations) into a new Panorama deployment, the correct workflow is: first use Panorama's 'Import Device Configuration' function (Panorama > Setup > Operations), which pulls each firewall's running configuration into Panorama as a device config bundle. After importing, you then use 'Export or Push Device Config Bundle' to organize and push those configurations under Panorama management (device groups and templates). Options A and D are incorrect because there is no native 'API retrieval' workflow or 'Firewall Migration plugin' for this task. Option B describes a manual XML snapshot export/import method that is not the recommended Panorama migration path.

No community discussion yet for this question.