topic Re: Palo Alto Firewall Migration – VSYS Consolidation in Next-Generation Firewall Discussions

Palo Alto Firewall Migration – VSYS Consolidation

Ahmedeid — Tue, 19 Aug 2025 08:15:17 GMT

Dears,

We currently have a production environment running on two Palo Alto 5220 firewalls. We are planning to migrate to new Palo Alto 5410 firewalls.

In the existing setup, the firewalls are divided into two VSYS (Vsys1 and Vsys2). Since Vsys1 is no longer in use, we only need to migrate Vsys2 to the new firewalls.

So I need your advice

Re: Palo Alto Firewall Migration – VSYS Consolidation

aleksandar.astardzhiev — Tue, 19 Aug 2025 20:56:09 GMT

Hi @Ahmedeid ,

Although Expedition tool is officially EoL you can still consider using it.

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool

With Expedition tool you should be able to import the config from the old device, make the necessary change and export it for the new firewall.