topic Re: Multiple vsys migration from ASA to Palo Alto in General Topics

Multiple vsys migration from ASA to Palo Alto

Bkrishnamoorthy — Mon, 07 Aug 2023 16:50:09 GMT

We have purchased a pair of Palo Alto firewalls which will replace pair of multicontext ASA firewalls. We need to migrate multi context configurations one by one to Palo Alto individual vsys. We have already used default vsys1 for ASA context1 , and we are trying to move another context2 to vsys2, but while we tried import the configuration, it's save on to default vsys. But we need to move to different vsys2. How to achieve it.

Since these firewalls will be managed from Panorama, we need to move all vsys configurations to Panorama in phases as we are migrating them one after one.

Re: Multiple vsys migration from ASA to Palo Alto

TomYoung — Mon, 07 Aug 2023 20:08:42 GMT

Hi @Bkrishnamoorthy ,

Here is a great discussion on the same topic -> https://live.paloaltonetworks.com/t5/general-topics/migration-import-of-configuration-only-to-a-destination-vsys-a/td-p/511286.

It sounds like you already have your configuration file in XML format. How did you generate it?

Thanks,

Tom

Re: Multiple vsys migration from ASA to Palo Alto

Bkrishnamoorthy — Tue, 08 Aug 2023 17:24:26 GMT

@TomYoung thanks for your input, we generated .xml using expedition tool. after i imported the configuration in to the firewall, i am not able to see the saved configurations as you shared in the provided link, where can i get these list of saved configurations .

Re: Multiple vsys migration from ASA to Palo Alto

TomYoung — Tue, 08 Aug 2023 18:09:13 GMT

Hi @Bkrishnamoorthy ,

Thank you! If you used Expedition for the migration, you can drag the config under vsys2 in Expedition under the Export tab.

Thanks,

Tom