Migrating a Policy Package

[aagrafi1]

Hello,

I want to migrate a Policy Package from one FMG to another. I have seen that it is possible to export a Policy Package to a CSV file, but I do not see any option in the FMG to import a package (from a CSV file or whatever).

So, if I want to migrate a policy package from one FMG to another, is there any tool that does this automation? Or, what is the recommended way of doing that?

Thanks

[Richie_C · Accepted solution]

Hi

You can use the execute fmpolicy print-adom-package-assignment <adom> <policy package/template name>

https://docs.fortinet.com/document/fortimanager/7.2.1/cli-reference/43841/fmpolicy#fmpolicy_print-ad...

The command would print out the policy package in FortiOS CLI format. When you have the CLI config, you could use a CLI script to run on your new policy package. This would create the policy package on your other FortiManager device.

For this to work you would also need to import all of the objects/services/interfaces etc. However, there are also commands to extract these objects. Further details can be found in the link i provided.

I hope that helps.

Thanks

Richard

[aagrafi1]

Thanks Richard. I think this is a good start for the migration.