topic Re: Cisco ASA to Palo Alto migration issue in Next-Generation Firewall Discussions

Cisco ASA to Palo Alto migration issue

Abdelhak — Thu, 01 Feb 2024 18:05:57 GMT

i'm working on a new projet where will change the current Cisco ASA firewall by an Palo alto network 440 so we are using Expeditio tool to move the configuration

on the existing configuration, our customer use policy based routing to route trafic over both connexion (VPN & Internet)

this parameter will be present on palo alto after expedition or we have to configure it manually ?

Re: Cisco ASA to Palo Alto migration issue

OtakarKlier — Fri, 02 Feb 2024 16:31:42 GMT

Hello,

The Palo Alto uses route based VPN's so you might need to reconfigure those separately.

Regards,

Re: Cisco ASA to Palo Alto migration issue

SteveKrall — Tue, 06 Feb 2024 02:36:34 GMT

Unless things have changed, migration tool does not create IPSEC tunnels. This is a manual process. PAN does support Policy Based Routing using the "Proxy ID" section. If you can convert to route based policies, I would recommend it.

Re: Cisco ASA to Palo Alto migration issue

Abdelhak — Tue, 06 Feb 2024 08:32:40 GMT

Could you help how can i configure the options requested options ?

Re: Cisco ASA to Palo Alto migration issue

OtakarKlier — Tue, 06 Feb 2024 18:08:33 GMT

Hello,

Which options, the VPN tunnels? What manufacturer is the other endpoint?

Regards,