Expedition Tool Cisco to PA

Swetang — Sat, 03 Oct 2020 05:01:23 GMT

I am having an Existing setup of cisco where all my ISP are terminated which is a standlalone device ,now migrating to PA 3220 with HA,but over here my ISP will be terminated on switch and from switch one cable to PA 3220 will be going...how do i migrate interfaces of all ISP(Approx 5) to Palo Alto(1).

How do i do remap,in this case,will i need to manually configure the policy and static route with respect to old cisco firewall.

Re: Expedition Tool Cisco to PA

BPry — Mon, 05 Oct 2020 15:51:48 GMT

@Swetang,

So as a quick question, why are you trying to go down to a sole interface instead of maintaining a separate interface for each ISP? Just for redundancy sake I wouldn't want to bring five different ISP connections through a single interface on my firewall.

how do i migrate interfaces of all ISP(Approx 5) to Palo Alto(1).

Assuming that you aren't running routing protocols, you would have to bring these across as VLANs so you can actually seperate things out on the firewall side of things. Again, I wouldn't recommend brining all five ISP connections across the same interface even when you have an HA setup.

How do i do remap,in this case,will i need to manually configure the policy and static route with respect to old cisco firewall.

Yes.

topic Re: Expedition Tool Cisco to PA in General Topics

Expedition Tool Cisco to PA

Re: Expedition Tool Cisco to PA