topic Re: Palo Alto Migration in Next-Generation Firewall Discussions

Palo Alto Migration

pharney26 — Thu, 13 Apr 2023 21:47:51 GMT

Currently, we have 2 3020s in our production network but I am also tasked with setting up two new 3410s to replace the current setup. I have gone through the initial setup and committed the admin password change. I have a current config backed up, I edited the XML file to set the mgmt interface IP to 192.168.1.1 /24 so I can access the web interface locally instead of over the network, and I have imported and loaded the configs into the new 3410s. Now when I try to log in with the changed admin password, which is the same as the one in the loaded config I cannot access the device, is there another way to migrate the config? The 3020s SW version is 9.1.15-h1 and our new device SW version is 10.x.x.

Re: Palo Alto Migration

Y-alwaysMe — Mon, 17 Apr 2023 09:38:06 GMT

Hi Pharney26,

Were you able to import the then load the config file to the new firewalls and also Commit the change successfully?

a) If the change was committed successfully whatever password is in backup file configured should work.

b) if not committed successfully then the initial password that you created for new firewalls should work.

Re: Palo Alto Migration

pharney26 — Mon, 17 Apr 2023 15:38:05 GMT

The change committed. After resetting the entire device I added a backup admin account and then uploaded the config, once committed and a reboot was issued I was locked out again, I read an article that the passwords are not properly hashed while exporting the running configuration. I was able to log in with the backup admin account and reset the original admin account.