topic Re: Hardware Migration PA-500 to PA-850 in General Topics

Hardware Migration PA-500 to PA-850

Sanasheikh — Thu, 07 Dec 2017 19:11:25 GMT

Hi,

Planning for upgrading PA-500 to PA-850, Just wanted to be sure that if we download the current running config from PA-500 and import it to new PA-850 device, will that work?
I am not sure if Importing configurations between non-matching hardware versions works in this case. Is there a way to do so or needs to be configured manually?

Re: Hardware Migration PA-500 to PA-850

davanderson — Thu, 07 Dec 2017 21:30:40 GMT

Interesting question. Back in 2012 - this was not an option. You could only go like for like hardware.

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Save-an-Entire-Configuration-for-Import-into-Another-Palo/ta-p/61476

I would suggest a command line migration. I prefer the "SET" command line commands. Dump the full 500 series configuration to text file via the SET language. Then modify the configuration to match your interfaces and then paste it back into the 800 series unit.

Tera-Term pro has an option to allow you to limit the number of copy/paste lines per second. Bump that up to 1 command every 500ms and this should allow you to paste the entire configuration in one go.

Re: Hardware Migration PA-500 to PA-850

kiwi — Thu, 07 Dec 2017 21:39:53 GMT

Hi @Sanasheikh,

There's the firewall migration guide that can guide you through the process of migrating your existing firewall to a new one (such as from a PA‐200 firewall to a PA‐220 firewall or from a PA‐500 firewall to a PA‐800 Series firewall) :

https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/technical-documentation/hardware-guides/migration/firewall-migration-guide.pdf

Hope this helps,

-Kiwi.