Migrate OpenBDS firewall to Palo Alto

Packet51 — Wed, 14 Aug 2024 06:08:48 GMT

What would be the best approach for migrating the OpenBDS firewall?

In a scenario where there are 4 units of OpenBDS and consolidating into 2 units of Palo Alto.

Would the Expedition tool able to merge the policies?

Any other things to note for the migration?

Please advise.

Re: Migrate OpenBDS firewall to Palo Alto

RomainSalmon — Wed, 14 Aug 2024 08:45:46 GMT

Hello,

From this document i would say that OpenBDS isn't compatible.

https://pan.dev/expedition/docs/

For the migration, it depends of the configuration and your architecture.

There isn't one only way to migrate. My opinion, install the Palo Alto firewall on the network. You can deploy the firewall in TAP/vwire mode in order that the firewall can log all the trafic. That will allow you after one month to create your policies based on application and not based on ports. Other way, you prepare the network migration and the policies before (1 to 1). The D Day, you have to shut your firewall and commit the new network configuration on Palo Alto firewall. With this method, you can migrate to an App-ID-Based Security Policy after the migration.

Best regards,

topic Migrate OpenBDS firewall to Palo Alto in Next-Generation Firewall Discussions

Migrate OpenBDS firewall to Palo Alto

Re: Migrate OpenBDS firewall to Palo Alto