topic Re: Migrate PA-500 to PA-820 in General Topics

Migrate PA-500 to PA-820

Alberto Fernandez — Sat, 04 Nov 2017 00:34:26 GMT

Hi,

I have a customer with a PA-500 cluster in version 6.0.3 out of support and has bought some new PA-820 that come with version 8.0.0.

As the PA-500 are not supported and I do not want to update them to version 8.0.0, is it possible to load the xml version 6.0.3 in a version 8.0.0?

Regards.

Re: Migrate PA-500 to PA-820

Kaje — Mon, 06 Nov 2017 17:27:19 GMT

I believe you should be able to leverage the Firewall Migration tool, to import the 6.o config, and export the 8.0 config.

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool

Re: Migrate PA-500 to PA-820

BPry — Mon, 06 Nov 2017 18:00:59 GMT

How comfortable are you with modifying XML files? If it were me doing this transition, I would do it through the actual XML file directly. The Migration tool has grown by leaps and bounds, but I've still got bad memories from when the tool wasn't as good as it is now so I tend to avoid it. If your comfortable modifying XML, this is probably small enough where doing it manually honestly wouldn't take that much time.