Export configuration with option 'Select Device Groups & Templates' selected can results in missing Device-Group hierarchy
4943
Created On 11/04/22 04:39 AM - Last Modified 11/18/24 22:42 PM
Symptom
- When exporting configuration from Panorama using the option "Select Device Groups & Templates" and choosing the desired Device-Group(s), the exported XML is not exporting the whole part of the configuration.
- The Device-Group hierarchy is not exported as part of the configuration.
- When importing the configuration back, it losses the Device-Group hierarchy, and the configuration can not be fully restored.
- Example of Saving Name configuration in Panorama with option "Select Device Groups & Templates" check.
Panorama > Setup > Operations tab > "Save Named Panorama configuration snapshot"
Environment
- All Panorama Platforms
- PAN-OS 9.1 and above
Cause
- "Select Device-Group and Template" is only supposed to get Device-Group and template/template-stack configuration part to be migrated to another Panorama. It does not include any internal read-only meta-information.
- The read-only meta-information includes panorama reference to Device-Group hierarchy and id information which allow the GUI to use those values to display the relationship of each Device-Group in a hierarchy format.
Resolution
- When exporting the configuration, Do not click on "Select Device Groups & Templates".
- This will get full backup and maintain the Device-Group hierarchy.
Additional Information
Device Group Hierarchy