topic Re: Fortigate 5.6.X migration -> QoS policies and DSCP marking missing in Expedition Discussions

Fortigate 5.6.X migration -> QoS policies and DSCP marking missing

HonoAl — Mon, 14 Sep 2020 16:20:32 GMT

Hi Community,

Currently working on a Forti to Palo migration. To my surprise, after uploading the current Forti´s configuration to the Migration tool, I noticed that the QoS polices had not been converterd//were missing. Also, the Forti, within the "config firewall shaper traffic-shaper" section does some "set diffservcode X" for some of the "firewall shaper traffic-shaper" polcies, which are not available within the new Palo Alto configuration-> security policies (where DSCP is configured).

Anyone know why these 2 problems are occurring and how could they be fixed?

Thanks.

HonoAl

Re: Fortigate 5.6.X migration -> QoS policies and DSCP marking missing

lychiang — Mon, 14 Sep 2020 17:04:52 GMT

Hi @HonoAl , Those two sections of the Fortinet configuration won't get converted automatically in the current version of Expedition. The current version of Expedition will auto convert address, services objects, security rules, and NAT rules, but not QOS policy. If you would like to help us to develop a new feature, please open a TAC case and attach your Fortinet config so we can validate to see if it's possible to auto map the QOS policy from Fortinet to Palo Alto Networks.

Re: Fortigate 5.6.X migration -> QoS policies and DSCP marking missing

HonoAl — Tue, 15 Sep 2020 11:03:29 GMT

Hi Lychiang,

Think we all agree that QoS policies are of paramount relevance when planning and implementing a migration. Being able to convert these using Expedition will significantly increase the value provided by this tool to all its users 🙂

Looking forward to seeing this new feature added soon. What´s the ETA for this new development?

Thanks.

Re: Fortigate 5.6.X migration -> QoS policies and DSCP marking missing

lychiang — Tue, 15 Sep 2020 15:46:01 GMT

Hi @HonoAl ,

Once you opened a TAC case , Please send your TAC case # to fwmigrate@paloaltonetworks.com. Thanks !