Move or Clone a Policy Rule or Object to a Different Device Group

Log in to Panorama and select the rulebase (for example,
Policy
Security
Pre Rules
) or object type (for example,
Objects
Addresses
).
Select the
Device Group
and select one or more rules or objects.
Perform one of the following steps:
(
Rules only
)
Move
Move to other device group
(
Objects only
)
Move
(
Rules or objects
)
Clone
In the
Destination
drop-down, select the new device group or
Shared
. The default is previously selected
Device Group
.
(
Rules only
) Select the
Rule order
:
Move top
(default)—The rule will come before all other rules.
Move bottom
—The rule will come after all other rules.
Before rule
—In the adjacent drop-down, select the rule that comes after the Selected Rules.
After rule
—In the adjacent drop-down, select the rule that comes before the Selected Rules.
The
Error out on first detected error in validation
check box is selected by default, which means Panorama will display the first error it finds and stop checking for more errors. For example, an error occurs if the
Destination
device group doesn't have an object that is referenced in the rule you are moving. When you move or clone many items at once, selecting this check box can simplify troubleshooting. If you clear the check box, Panorama will find all the errors before displaying them. Regardless of this setting, Panorama won’t move or clone anything until you fix all the errors for all the selected items.
Click
OK
to start the error validation. If Panorama finds errors, fix them and retry the move or clone operation. If Panorama doesn't find errors, it performs the operation.
Select
Commit
Commit and Push
,
Edit Selections
in the Push Scope, select
Device Groups
, select the original and destination device groups, click
OK
, and then
Commit and Push
your changes to the Panorama configuration and to the device groups.