topic Re: Vsys migration in General Topics

Vsys migration

s.mousa451637 — Mon, 08 Sep 2025 08:39:10 GMT

Hello All,

What is the best approach to migrate a Palo Alto firewall configuration with VSYS to another Palo Alto firewall (As is)?

Re: Vsys migration

BPry — Mon, 08 Sep 2025 17:18:59 GMT

@s.mousa451637,

What exactly are you doing? Moving from a device with multi-vsys to one that only has a single VSYS? Migrating an existing VSYS on a multi-vsys system to it's own independent hardware?

Re: Vsys migration

s.mousa451637 — Mon, 08 Sep 2025 17:51:45 GMT

Hi, I am moving 2 pa devices with 4 vsys to 2 pa devices also with 4 vsys, no changes in configuration (As it is migration)

I am asking about the fastest and smoothest way to do that and there any considerations ?

Re: Vsys migration

BPry — Mon, 08 Sep 2025 18:02:35 GMT

@s.mousa451637,

This is a simple device migration then, nothing special for multi-vsys enabled systems when compared to a device with a single vsys. Export the device state from the existing hardware and import on the replacement hardware, this will work better if you have all of the hardware on the same PAN-OS version. You'll just need to account for any interface modifications that you will need to make to align for expected interface media (IE: if ethernet1/11 is expected to be copper and it's now an SFP interface, you'll either need to account for that or swap it over to the proper interface on the new hardware).