topic Migrating Sonicwall in General Topics

Migrating Sonicwall

georgecook — Wed, 30 Sep 2015 09:45:35 GMT

Has anyone migrated from a sonic wall to a palo alto? If so how did you do it? The palo migration tool seems to support a load of firewalls but not sonicwalls.

Is it a case of doing it all manually or is there a migration tool around that I'm missing?

Any help would be massively appriciated.

Re: Migrating Sonicwall

cpainchaud — Wed, 30 Sep 2015 10:12:49 GMT

some scripts would probably help to avoid 90% of the work

Re: Migrating Sonicwall

santonic — Wed, 30 Sep 2015 10:33:38 GMT

One thing you can almost always do is export network objects from old firewall to some text form and then migrate them to PA with 'set' commands in CLI. Same for services and groups. With a bit of effort (and scripting skills) maybe you'll manage to use this for rules as well.

If you have a lot of IPSEC tunnels with same parameters scripts will also be useful.

Re: Migrating Sonicwall

OtakarKlier — Wed, 30 Sep 2015 18:15:35 GMT

I know its a lot of rules and I'm not sure how many rules you have or how 'clean' your rules currently are. However I take the painful road to build the rules from scratch based on the current firewalls setup. This way I can 'clean up' any rules that are no longer needed and start fresh.

Just my way, not saying its the best...

Re: Migrating Sonicwall

santonic — Thu, 01 Oct 2015 12:41:06 GMT

Yeah true. If you are in no rush to migrate it's a good idea to review the old policy and build a new policy from scratch. That way you can also replace services with applictions, write general rules based on zones except network objects, get rid of no longer needed rules...