topic Re: How to migrate PA 3220 config on PA 1410 in Next-Generation Firewall Discussions

How to migrate PA 3220 config on PA 1410

A.Choughule — Sat, 15 Nov 2025 02:20:09 GMT

We have 3220 appliance and we want to migrate configuration to new 1410 appliance. Please provide link for migration tool

Re: How to migrate PA 3220 config on PA 1410

BPry — Mon, 17 Nov 2025 16:25:58 GMT

@A.Choughule,

The migration tool is not supported anymore and would be drastically overkill to use when going between a PAN-OS device to another PAN-OS device. I would go about exporting the configuration from your PA-3220s and importing it onto your new hardware assuming that you either set the same master key between devices so things like the pre-shared-key and phash values are the same or if you've left them as default. This way if you need to make any changes to interfaces you can do that easily directly in the XML before you load it between devices. Once you load the new configuration just check things over and make sure you don't need to correct any validation issues.

Re: How to migrate PA 3220 config on PA 1410

TomYoung — Mon, 17 Nov 2025 18:25:10 GMT

Hi @A.Choughule ,

@BPry is correct. I can't think of any changes you would need to make except interfaces. Even those are the same except 1/17 and 1/18 are 10 Gbps on the PA-3220 and 1 Gbps on the PA-1410. The best way to change those would be search and replace in the XML. The GUI will take too many clicks.

https://docs.paloaltonetworks.com/hardware/pa-3200-hardware-reference/pa-3220-series-overview/front-panel-3200-series

https://docs.paloaltonetworks.com/hardware/pa-1400-hardware-reference/pa-1400-series-overview/front-panel-1400-series

Thanks,

Tom

Re: How to migrate PA 3220 config on PA 1410

KeldenFrost — Wed, 10 Dec 2025 07:26:39 GMT

Thanks for those links, you made my day.

Re: How to migrate PA 3220 config on PA 1410

S.Manir — Tue, 23 Jun 2026 12:43:22 GMT

does it matter if the software versions are different i.e. our old PA-3220 is running 10.1.13 and the new 1410 are on 11.1.3

Re: How to migrate PA 3220 config on PA 1410

TomYoung — Tue, 23 Jun 2026 16:03:45 GMT

Hi @S.Manir ,

In most cases, no. The newer PAN-OS version will convert the configuration. Since your PA-3220 supports PAN-OS 11.1, you could upgrade it to be 100% sure.

https://docs.paloaltonetworks.com/compatibility-matrix/reference/supported-os-releases-by-model/palo-alto-networks-next-gen-firewalls#id9680433e-055f-4f38-a7d0-6d31e7d557bc

Thanks,

Tom

Re: How to migrate PA 3220 config on PA 1410

S.Manir — Wed, 24 Jun 2026 08:08:06 GMT

Hi @TomYoung

i managed to successfully import from 10.1 to the new 1410 on 11.1 and it worked nicely.