How to Recover Full Device Configuration if Device is No Longer Managed by Panorama

Issue

In the event that the Panorama server goes offline and is unrecoverable, how do you absorb the prior Panorama configuration into the local firewall so that the relationship between the local firewall and Panorama is severed completely?

Resolution

A merged configuration, which includes the Panorama configuration and local configuration for the firewall, can be recovered by generating a Technical Support file from the Palo Alto Networks device. The merged configuration file is located in the \opt\pancfg\mgmt\saved-configs directory and is named .merged-running-config.xml. Copy this file and rename it so that it can be imported and loaded to the firewall.

owner: gcapuno