Migration FROM PA-850 to PA-3220

Metgatz — Tue, 02 Nov 2021 00:25:14 GMT

Dear:

Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220.

Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect.

Based on your expertix and experience, what is the best way to approach this migration.

I remain attentive, thank you very much.

Best regards

Re: Migration FROM PA-850 to PA-3220

TomYoung — Tue, 02 Nov 2021 02:55:09 GMT

This is what I do:

Configure the licenses, software, and dynamic updates to match on the new firewall.
Export and import the certificates.
Export and import the config.

That's it!

I have never played with exporting and importing the device state. That may include the certificates as well.

Thanks,

Tom