topic Fortinet migration in Expedition Discussions

Fortinet migration

PatriotsFan — Fri, 11 Jan 2019 21:47:13 GMT

Looking to move addresses, address groups, services and service groups from a FGT1000C to a Palo 3060 and then build the policy in Palo manually. I've backed up the FGT config and created a new project in Expedition and was able to import it successfully. The current User Guide is a bit confusing. I'm new to Palo and was wondering if anyone has done this successfully.

Re: Fortinet migration

sjanita — Tue, 22 Jan 2019 03:33:59 GMT

after importing and migrating your fortinet configuration only merge the addresses/service and groups into your base config. Below is a thread on how to merge configurations.

After merging and generatinng the XML you can create the security policies directly on teh Palo alto FW or panorama.

https://live.paloaltonetworks.com/t5/Migration-Tool-Discussions-old/Merge-Configurations/td-p/20807

Re: Fortinet migration

PatriotsFan — Tue, 22 Jan 2019 16:39:07 GMT

The link provided does not detail out how to perform the actual steps but instead provides high level guidance. It also doesn't mention anything Fortinet. I am new to Expedition and believe the User Guide needs updating to provide more detail on how to perform migrations.