topic Re: Migrating config from PA -500 to pa 220 in General Topics

Migrating config from PA -500 to pa 220

Jatin.Singh — Thu, 03 Oct 2019 00:28:24 GMT

Hi,

Planning for upgrading PA-500 to PA-220, Just wanted to be sure that if we download the current running config from PA-500 and import it to new PA-220 device, will that work?
I am not sure if Importing configurations between non-matching hardware versions works in this case,according to this

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaOCAS

Is there a way to do so or needs to be configured manually?

and is this the best approach

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migration-guide.pdf

Re: Migrating config from PA -500 to pa 220

reaper — Fri, 07 May 2021 13:07:37 GMT

The most important consideration are supported features and interface types

The pa-220 and pa-500 have the same interfaces, so that won't cause any issues

Feature wise, there is not a big leap between the pa-220 and pa-500 so that should not be a an issue either

make sure both devices are on the same PAN-OS (8.1) and content packages when migrating the config to prevent conflicts

Re: Migrating config from PA -500 to pa 220

OtakarKlier — Fri, 04 Oct 2019 18:31:16 GMT

Hello,

As Reaper mentioned, its a straight forward process. I would suggest that the two devices be on the same code version so it doesnt cause any weirdness. But basically exporting the config from the old device and importing into the new.

Done it a few times.

Regards,

Re: Migrating config from PA -500 to pa 220

Hammer88 — Fri, 07 May 2021 12:39:02 GMT

has 8 interfaces 🙂