Import Configurations
Depending on the number of configurations being imported and the number of objects those configurations reference, the import process may take several minutes.
Note | If you log out of the Firewall Management Center or if your user session expires after you click Import, the import process continues in the background until it is complete. We recommend that you wait for the import process to complete before creating any new objects or policies. Attempting to create them while the import process is still running might result in failures. |
Procedure
Step 1 | On the importing Firewall Management
Center, choose System ( | ||
Step 2 | Click Upload Package. | ||
Step 3 | Enter the path to the exported package or browse to its location, then click Upload. | ||
Step 4 | If there are no version mismatches or other issues, choose the configurations you want to import, then click Import. If you do not need to perform any conflict resolution or interface object mapping, the
import completes and a success message appears. Skip the rest of this procedure. | ||
Step 5 | If prompted, on the Import Conflict Resolution page, map interface objects used in the imported configurations to zones and groups with matching interface types managed by the importing Firewall Management Center. Interface object type (security zone or interface group) and interface type (passive, inline, routed, and so on) of source and destination objects must match. For information, see Interface. If the configurations you are importing reference security zones or interface groups that do not already exist, you can map them to existing interface objects, or create new ones.
| ||
Step 6 | Click Import. | ||
Step 7 | If prompted, on the Import Resolution page, expand each configuration and choose the appropriate option as described in Conflict Resolution for Duplicate Configurations. | ||
Step 8 | Click Import. | ||
Step 9 | Update all feeds. For example, go to and click the Update Feed button on the URL, Network, and DNS Lists and Feeds pages. Imported policies do not include feed contents. | ||
Step 10 | Wait for all feed updates to complete before deploying the policies to devices. |
What to do next
Note | If you import a configuration that contains Microsoft Active Directory users and groups we strongly recommend you download all users and groups after the import to avoid issues in decryption
policies, access control policies, and possibly other policies. (, then click Download Now( |
-
Optionally, view a report summarizing the imported configurations; see View Task Messages.