Convert Palo Firewall config 3020 to transition to the 3410 Palo Firewall now and get rid of Panorama in the process.

VEGASGABE — Thu, 02 May 2024 13:55:26 GMT

Currently previous Security team had one Panorama to manage Palo 3020. Want to remove objects from Panorama and transfer config from 3020 to new 3410 Palo Firewall. Any converter for this or gotchas that I am missing? Thanks

Re: Convert Palo Firewall config 3020 to transition to the 3410 Palo Firewall now and get rid of Panorama in the process.

dpuigdomenec — Tue, 07 May 2024 15:49:40 GMT

Hi @VEGASGABE

Not sure if the easiest solution is to connect your PA3410 to the Panorama and push the objects from there.

It that is not a solution for you, you can download the configuration and use the load config partial to push the objects in the new FW.

But if you would like to check all the objects and rules you can use Expedition. So you can import the FW config and the Panorama config and from there you can drag and drop the policies and objects you want on your FW configuration.

Let me share a set of videos that can help you getting an idea of what you can do with Expedition, although the videos are doing a complete migration, https://www.youtube.com/playlist?list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-

Hope this helps,

David

topic Convert Palo Firewall config 3020 to transition to the 3410 Palo Firewall now and get rid of Panorama in the process. in Expedition Discussions

Convert Palo Firewall config 3020 to transition to the 3410 Palo Firewall now and get rid of Panorama in the process.

Re: Convert Palo Firewall config 3020 to transition to the 3410 Palo Firewall now and get rid of Panorama in the process.