Export configuration with option 'Select Device Groups & Templates' selected can results in missing Device-Group hierarchy

Export configuration with option 'Select Device Groups & Templates' selected can results in missing Device-Group hierarchy

4943
Created On 11/04/22 04:39 AM - Last Modified 11/18/24 22:42 PM


Symptom


  • When exporting configuration from Panorama using the option "Select Device Groups & Templates" and choosing the desired Device-Group(s), the exported XML is not exporting the whole part of the configuration.
  • The Device-Group hierarchy is not exported as part of the configuration.
  • When importing the configuration back, it losses the Device-Group hierarchy, and the configuration can not be fully restored.  
  • Example of Saving Name configuration in Panorama with option "Select Device Groups & Templates" check.
    Panorama > Setup > Operations tab > "Save Named Panorama configuration snapshot"

pix3.png

 



Environment


  • All Panorama Platforms
  • PAN-OS 9.1 and above


Cause


  • "Select Device-Group and Template" is only supposed to get Device-Group and template/template-stack configuration part to be migrated to another Panorama. It does not include any internal read-only meta-information.
  • The read-only meta-information includes panorama reference to Device-Group hierarchy and id information which allow the GUI to use those values to display the relationship of each Device-Group in a hierarchy format.

 
 


Resolution


  1. When exporting the configuration, Do not click on  "Select Device Groups & Templates".
  2. This will get full backup and maintain the Device-Group hierarchy.


Additional Information


Device Group Hierarchy

 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kF4BCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language