topic Re: Checkpoint R77.30 to Paloalto migration in Expedition Discussions

Checkpoint R77.30 to Paloalto migration

JyotiPrakash — Fri, 17 Apr 2020 14:35:12 GMT

Hi,

I would like to migrate a couple of Checkpoint Firewalls to Paloalto but I’m not sure what’s the best approach to proceed with this migration. Also, Checkpoint has all blades ON with full configuration. Does Expedition migration tool able to migrate all Checkpoint Blades configuration?

Is any documentation available for Checkpoint to Paloalto migration procedure?

Re: Checkpoint R77.30 to Paloalto migration

azuniga — Fri, 17 Apr 2020 19:03:03 GMT

Hello,

The checkpoint blades should only affect the interface portion of the migration, all of the other configuration portions should be able to move in without an issue. You will need to address this once you migrate in the configuration and remap the network interfaces.

Although I do not have any videos for checkpoint but once you migrate the configuration most of the steps in the ASA video are the same.

Cisco ASA migration video

https://www.youtube.com/playlist?list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-

I hope that's helpful.

Re: Checkpoint R77.30 to Paloalto migration

JyotiPrakash — Mon, 04 May 2020 19:51:24 GMT

Thank you so much for the info. I tried but seems like NAT is an issue for Object NAT in a checkpoint during the conversion for PA. Also, VPN config won't import from Checkpoint. So not sure if this tool will help much or not.