topic Migrate from PA-3050 to PA-3410 in Expedition Discussions

Migrate from PA-3050 to PA-3410

DMorehead — Mon, 15 Apr 2024 13:18:11 GMT

I see on a prior message that exporting a PA-850 configuration allows it to be imported into a PA-3430 and there seems to be no issue with the version either firewall is running. I have a pair of PA-3050's that are being replaced with PA-3410's which are very similar hardware setups but have been told there is no migration procedure to move the configuration between these similar units?

Re: Migrate from PA-3050 to PA-3410

reaper — Mon, 15 Apr 2024 15:16:54 GMT

that's because of the OS gap between the 3000 series (<=9.1) and 3400 (=>10.2)

In theory you can export the configuration file and import it onto the 3400 and it may just work, but it might not

the best approach is to take it step by step, there's a lot of config that can be put into batches of set commands that will simply work exactly the same way, some system config will be slightly different

an easy way to export all the set commands from the old platform:

> set cli config-output-format set

> set cli pager off

> configure

# show

you can now use these set commands to import sections into the new firewall

Re: Migrate from PA-3050 to PA-3410

DMorehead — Mon, 15 Apr 2024 15:24:56 GMT

Thank you for the response. I did initially test exporting the config from the 3050's and importing into the 3410's but received failiures when attepting to commint the config. Thanks also for adding the commands to export from the cli and importing sections to the new firewall, this will be very helpful!!