topic ASA to Palo Alto Migration in Expedition Discussions

ASA to Palo Alto Migration

Aoosthuizen — Wed, 22 Aug 2018 07:43:50 GMT

Hi Guys

I have imported a ASA config to Expedition, I can see that it did import the Adress, Services, Address Groups and Service Groups but nothing els. VPN, Interfaces, Rules and all other tabs are empty. Cisco ASA Version 9.4(1). Any ideas

Re: ASA to Palo Alto Migration

alestevez — Tue, 28 Aug 2018 10:10:50 GMT

Its posible to receive a copy of that config via fwmigrate at paloaltonetworks dot com or opening a case with support and let us know the case number to get access to it and then check the format. Thanks

Re: ASA to Palo Alto Migration

bagherib — Sat, 01 Sep 2018 01:14:37 GMT

Make sure you are always updating your Expedition.

With that said, I too noticed that the latest Cisco ASA 9 code isn't transferring over nicely. I recommend letting the Expedition dev team know so they can look into it.

Re: ASA to Palo Alto Migration

NathanielM — Sat, 15 Sep 2018 18:16:51 GMT

I'm having major issues too.

ASA Version 9.1(5)21 not importing any config

ASA Version 9.7(1) not generating any useful xml output.

Will email fwmigrate@paloaltonetworks.com

Re: ASA to Palo Alto Migration

bagherib — Sat, 15 Sep 2018 20:29:43 GMT

I'm currently on a project where I'm importing large ASA configs from version 9.8(2)28. So far other than lots of duplicate address objects, evertything else has been transferring. I have to go into the config file and count all the object groups and service groups in addtion to security and NAT policies just to make sure nothing fell through the cracks during the import.