topic Re: How to migrate configuration from 3200 series appliance to 5220. in General Topics

How to migrate configuration from 3200 series appliance to 5220.

JyotiPrakash — Fri, 03 Jan 2020 19:24:46 GMT

Hi,

Could you please help me to understand the procedure for how to migrate configuration from a 3200 series appliance to 5220.

Re: How to migrate configuration from 3200 series appliance to 5220.

OtakarKlier — Fri, 03 Jan 2020 21:08:52 GMT

Hello,

The high level overview is:

Make sure the 5220 is the same code version as the 3200.
Export the 3200 config
import config into the 5220
make sure the 5220 is working correctly, policies, dynamic updates, HA, etc.
Move cables from 3200 to 5220.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQQCA0

Regards,

Re: How to migrate configuration from 3200 series appliance to 5220.

BPry — Fri, 03 Jan 2020 21:57:39 GMT

@JyotiPrakash,

The really important step here is that to directly load the config on the new firewall and have all the stored phash values actually match, you'll need to actually know what you have the master key on your current device set to. Without matching the master key, the phash values stored within the configuration file won't match which will cause a bunch of different issues.

The only other thing to really think about is the media differences of the interfaces, which may require that you utilize different interfaces for some of your connections. The 5220 is only going to have 4 copper Ethernet interfaces on ethernet1/1 through ethernet1/4, where your 3200 device had 8. The good news is that the XML is easy to directly edit if this is the case, as you can simply copy everything under the interface (IE: ethernet1/8) to whatever interface you actually require (IE: ethernet1/3).