topic Re: 3050 to 3250 Hardware Upgrade in General Topics

3050 to 3250 Hardware Upgrade

Justin.Abendroth — Tue, 08 Sep 2020 21:33:17 GMT

Hi,

I will be upgrading my 3050 firewall (managed by panorama) to a 3250 soon and am curious if there are any best practices guides out there moving from a 3050 to a 3250?

Thanks!

Re: 3050 to 3250 Hardware Upgrade

Abdul-Fattah — Wed, 09 Sep 2020 13:30:27 GMT

Hi,

i do not think there is an offical guide for upgrading between PA Hardware Firewalls.

My advice most important both Firewalls should have same PAN-OS version when you export and import Config.

Re: 3050 to 3250 Hardware Upgrade

sellington — Tue, 15 Sep 2020 15:34:45 GMT

Hello,

Recently went through this same upgrade, I could not find a document catered specifically for a migration between these two particular devices, but the basics should mostly be the same as moving between other PA hardware platforms. I used this guide for putting together my basic plan.

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migration-guide.pdf

A couple of quick notes, if you run HA, the port configs vary slightly, the 3250's do not have a dedicated copper HA2 port but instead move towards the HSCI port for HA2.

Additionally, if you follow the advice of ensuring they are on the exact same panOS release prior to moving over the config, make sure its a preferred release 🙂 I made the mistake of downgrading my 3250's to a panOS release matching my 3050's prior to the switch over and got hit by this bug in the next release, it was a rough day.

Re: 3050 to 3250 Hardware Upgrade

Justin.Abendroth — Tue, 15 Sep 2020 18:32:10 GMT

Thanks for the warning. I was planning on doing the same thing and would have hit that bug.

Re: 3050 to 3250 Hardware Upgrade

DarrinHarrison — Fri, 23 Dec 2022 14:47:13 GMT

My company is getting ready to implement this same upgrade from a 3050 HA environment to a 3250 HA environment. The instructions in this post are a couple of years old. Has this process changed any... is there a new better procedure?

Re: 3050 to 3250 Hardware Upgrade

PavelK — Sat, 24 Dec 2022 05:09:19 GMT

Hello @DarrinHarrison

in past couple of month, there were a few threads regarding this kind of migration:

https://live.paloaltonetworks.com/t5/general-topics/firewall-replacement-procedures/m-p/520137#M107817

https://live.paloaltonetworks.com/t5/general-topics/pa-migration-from-3050-to-5220-appliances/m-p/516299#M107213

https://live.paloaltonetworks.com/t5/general-topics/pa-3020-to-pa-460-migration/m-p/516202#M107191

https://live.paloaltonetworks.com/t5/panorama-discussions/palo-alto-5020-migrate-to-5220-from-panorama/m-p/502505#M945

Could you have a look into the above discussions to see it can be helpful?

Kind Regards

Pavel