Importing Firewall Policies

Use this page to manually import a firewall policy from the discovered or onboarded sites (next generation firewall sites).

Procedure

1. Select Configuration > Firewall > Firewall Policy.

   The Firewall Policy page appears.

2. Click Import.

   The Import Firewall Policies page appears displaying a list of discovered devices (next generation firewall devices).

3. Select the devices from which you want to import the firewall policies and click Next.

   The Discovered Services tab appears.

4. Select the policies that you want to import and click Next.

   The Resolve Conflicts tab appears.

5. If there are any conflicts with the imported objects, object conflict resolution(OCR) operation is triggered. The Conflicts window displays all the conflicts between CSO and the next generation firewall device. Select an object from the Conflicts window and click on any of the below option to resolve the object conflict.

   The resolution options are:

   • Rename Object—Rename the imported object. By default, "_1" is added to the object name, or you can specify a new name.

   • Overwrite with imported value—The object in CSO is replaced with the object from the import operation.

   • Keep existing object—The object name in CSO is used instead of what is on the next generation firewall device.

6. Click Finish.

   A summary of the discovered services is listed.

7. Review the summary and click OK to import the firewall policies.

   The import policy job is created and the firewall policies are imported from next generation firewall device to CSO. You can view the imported policy from the Firewall Policy page.