topic Conversion of SonicWALL NSA3600 config to PA 220? in General Topics

Conversion of SonicWALL NSA3600 config to PA 220?

catrock — Wed, 03 Oct 2018 13:22:21 GMT

Is it possible to convert (migrate) a SonicWALL NSA3600 configuration to a PA 220?

Using Expedition 4.0?

Other method?

Thanks

Re: Conversion of SonicWALL NSA3600 config to PA 220?

BPry — Wed, 03 Oct 2018 15:00:29 GMT

@catrock,

No and yes.

Expedition doesn't have a direct convertion for Sonicwall, but you can do it through the Machine Learning module. Personally what I would recommend is that you actually take a look at your Sonicwall configuration and manually rebuild the policies on the Palo Alto. The issue with migrations, at least to me, is that you have to spend a large amount of time going back through and 'Palotizing' the configuration once everything is up and running.

I personally find simply rebuilding the configuration, in a Palo centric manner, to be drastically easier and overall faster then using any of the migration assistants.

Re: Conversion of SonicWALL NSA3600 config to PA 220?

OtakarKlier — Thu, 04 Oct 2018 15:55:33 GMT

Hello,

I agree with @BPry, I usually rebuild from scratch since you are going from a traditional layer3 firewall to a layer 7. Build the policies as layer 3/4 and then build you more specific ones above those to make sure the new layer 7 policies are getting hit. Then start removing the layer3/4 traditional rules.

It is a process and not an easy one at that. But its worth it in the end.

Regards,