1. Saving the Configuration on the Source Palo Alto Firewall

First, navigate to the Device tab. Under the left-hand pane, select Setup, and within the Setup section, choose Operations.

You will see a section labeled Configuration Management. From here, select Save Named Configuration Snapshot. Give the configuration file a specific name that makes it easy to identify, such as backup-config.xml. This will ensure that the current running configuration is saved and stored on the unit itself.

2. Exporting the Saved Configuration

After saving the configuration on the unit, it’s time to export it. Stay in the Device tab, then go back to Setup > Operations. In the same Configuration Management section, select Export Named Configuration Snapshot. A pop-up window will appear, allowing you to select the file you saved earlier on the unit (e.g., backup-config.xml).

Click the option to export the file. It will download in XML format to your local machine.

3. Importing the Configuration into the Target Palo Alto Firewall

Now, on the new Palo Alto unit, navigate to the same Device tab and again to Setup > Operations.

In the Configuration Management section, select Import Named Configuration Snapshot. This will allow you to browse your local machine for the XML file you previously downloaded. Select the file and confirm the import. This will store the configuration on the unit.

4. Loading and Applying the Configuration

Once the configuration file is imported and stored on the target unit, return to the Load Named Configuration Snapshot option in the same section. Select the configuration file you just imported from the list, and click to load it.

Before proceeding, it’s a good idea to review the configuration for any adjustments. Obvious key area to check is management interface so you don’t lose reachability to the management interface. Ensure this is correct for the new environment. Otherwise serial connectivity will be required to set the management interface again.

After reviewing, commit the changes by selecting the Commit option at the top of the interface. This will apply the new configuration to the target firewall. Depending on the changes, the system may prompt for a reboot, especially if interface configurations or critical system changes were applied.