article Expedition Supported 3rd Party Vendor Matrix in Expedition Articles

Expedition Supported 3rd Party Vendor Matrix

lychiang — Thu, 01 Feb 2024 12:19:18 GMT

Expedition supports migration sections of the below Vendor's configuration to PAN-OS configuration

**The list of tested Vendor OS version, version not listed here needs further validations

*** The UserID CN chain is extracted from the original configuration and integrated into the migrated security rule. However, the device configuration must be manually performed on the device itself.

Table1: Expedition supports converting 3rd Party vendors config sections (Updated on 2024/01/01)

Note: Table will be updated when new support added

Vendor

Supported Vendor OS**

Global Address Object

Address Objects

Address Group Objects

Service Objects

Service Group Objects

User ID

Security Policy

NAT Policy

Network Interface (L3 only)

Routing(Static Routes Only)

VPN

Checkpoint

R75,R77

✔

***

✔

> R80

✔

***

✔

Cisco

ASA 9.0, 9.1,9.6,8.2,8.4,

✔

FirePower [only in ASA syntax]

✔

Fortinet

Fortigate 4.0, 5.0,6.0

✔

IBM XGS

5.1

✔

Juniper

All Netscreen Firewalls (ScreenOS)

✔

Junos 11.4, 12.1, 12.3

✔

Forcepoint

Sidewinder

✔

Stonesoft

✔

Re: Expedition Supported 3rd Party Vendor Matrix

AnthonyTanzi — Mon, 04 Oct 2021 20:45:22 GMT

When will Expedition 2.x be available?

Re: Expedition Supported 3rd Party Vendor Matrix

AnthonyTanzi — Mon, 04 Oct 2021 20:46:15 GMT

Is that April of 2022?

Re: Expedition Supported 3rd Party Vendor Matrix

lychiang — Mon, 04 Oct 2021 20:47:45 GMT

Yes

Re: Expedition Supported 3rd Party Vendor Matrix

Sanfran_Ryan — Tue, 18 Jan 2022 05:36:09 GMT

Hi,

In my memories, there are some migration guide for these 3rd party devices, but I can't find it now.

Is there anyone have the link?
What I had downloaded before is "Forcepoint Sidewinder Migration Guide.pdf"

Thanks.

Re: Expedition Supported 3rd Party Vendor Matrix

Thrauma — Fri, 25 Nov 2022 12:07:37 GMT

Hello

What About Stormshield ? Is there a way to use Expedition OR to use another tool/method to convert for SShield to PA ?

Re: Expedition Supported 3rd Party Vendor Matrix

msasadaira — Fri, 25 Nov 2022 12:10:49 GMT

For Stormshield you can export the rules and objects in CSV and then use Expedtion to import these CSVs and build your configuration.

Re: Expedition Supported 3rd Party Vendor Matrix

mkukucska — Thu, 09 Mar 2023 10:30:31 GMT

Hi,

How about Sonicwall firewalls? Is there chance to use Expedition tool to convert Sonicwall config?

Thanks,

Misi

Re: Expedition Supported 3rd Party Vendor Matrix

lychiang — Thu, 09 Mar 2023 17:19:37 GMT

Hi @mkukucska Yes, it is in the roadmap of Expedition 2.x

Re: Expedition Supported 3rd Party Vendor Matrix

mkukucska — Thu, 09 Mar 2023 19:20:22 GMT

And when can we expect Expedition 2.x to be released?

Re: Expedition Supported 3rd Party Vendor Matrix

ghughes — Mon, 23 Oct 2023 19:59:43 GMT

Hello!

Any plans on including Watchguard Firebox in the Expedition tool?

Thanks!

Re: Expedition Supported 3rd Party Vendor Matrix

dpuigdomenec — Tue, 24 Oct 2023 08:54:15 GMT

Hi @ghughes

Sorry but we do not have plans to add more supported 3rd party vendors to our list of parsers.

In case you need to execute a migration from a non-supported vendor (or even supported one at a big scale) I will encourage you to contact to your sales account contact for PS Migration Factory engagement.
Hope this helps,

Best,

David

Re: Expedition Supported 3rd Party Vendor Matrix

iccnetmgr — Thu, 23 Nov 2023 05:24:57 GMT

Can the Expedition tool offer a shortcut to importing a PA-850 PAN-OS v8.1 to a PA-3410 PAN-OS v10.1?
Kind Regards,
Dan

Re: Expedition Supported 3rd Party Vendor Matrix

dpuigdomenec — Thu, 23 Nov 2023 11:27:15 GMT

Hi @iccnetmgr

Expedition tool is intended to help on migrations from 3rd party vendors and also to optimise the security posture on a PANOS device.

The migration you are describing could be done using PANOS features as export and import from old to new devices (you may need to update networking information and VPN configuration).

Once you have your configuration pushed to your new device you can download it to Expedition and do some optimisation like removing duplicates and merging similar policies among other features Expedition can help.

For assistance on the PANOS upgrade I will suggest you contact the TAC team so they can provide you more information and guides.

Hope this helps,

David

Re: Expedition Supported 3rd Party Vendor Matrix

s.Govardhanam — Mon, 25 Nov 2024 07:54:53 GMT

Is this tool is support to migrate from Sophos firewall to PA 440 ?

Re: Expedition Supported 3rd Party Vendor Matrix

dpuigdomenec — Mon, 25 Nov 2024 10:41:15 GMT

Hi @s.Govardhanam

Thanks for reaching out but unfortunately Expedition does not support Sophos.

Given your scenario:

I encourage you to contact your sales account representative to point you to the PS/Migration Factory team or
Alternatively you can explore using the import from CSV functionality available in Expedition1, you will need to export into a file (CSV) the unsupported 3rd party vendor configuration. Reference documentation here: https://live.paloaltonetworks.com/t5/expedition-articles/a-how-to-guide-on-the-import-csv-option/ta-p/258388

Hope this helps,

Re: Expedition Supported 3rd Party Vendor Matrix

darrenchew — Mon, 02 Dec 2024 08:57:12 GMT

Hi @lychiang, saw your comment wrt to the roadmap of conversion from Sonicwall to PAN OS. Is the conversion available today on Expedition 2.0? Thank you.

Re: Expedition Supported 3rd Party Vendor Matrix

lychiang — Mon, 02 Dec 2024 16:50:05 GMT

Hi @darrenchew Expedition 2.x will need panser for sonicwall migration, please see detail https://pan.dev/expedition/docs/expedition_export/#sonicwall I will encourage you to contact migration factory team for more details.

Re: Expedition Supported 3rd Party Vendor Matrix

darrenchew — Tue, 03 Dec 2024 12:36:28 GMT

Hi @lychiang Thank you very much for the sharing.