topic Tools and Techniques to Speed ASA to PAN Migration in General Topics

Tools and Techniques to Speed ASA to PAN Migration

palomed — Mon, 19 Oct 2020 19:58:13 GMT

I wondered if the community could advise on any methods to migrate configuration from a Cisco ASA 5525 to PAN 3220.

Are there any tools that could assist? Just being able to migrate objects and object groups we be a big help. I only have about 100 access rules so that's not too bad. Thanks for any ideas.

Re: Tools and Techniques to Speed ASA to PAN Migration

rmfalconer — Mon, 19 Oct 2020 20:26:58 GMT

Are you familiar with Expedition? Or are you looking for something different?

Re: Tools and Techniques to Speed ASA to PAN Migration

BPry — Mon, 19 Oct 2020 21:05:17 GMT

@palomed,

Look into Expedition as @rmfalconer mentioned, that will do the basic migration. Just make sure that you actually go back and customize the configuration to actually use app-id and assign profiles to the security rulebase entries before you actually deploy it so that you're actually using all of PAN's features that you're licensed for.

Re: Tools and Techniques to Speed ASA to PAN Migration

Abdul-Fattah — Tue, 20 Oct 2020 08:48:43 GMT

Hello @palomed ,

Expedition is the Palo Alto Migration tool, and ASA is avalable to migrate from.

you can migrate objects as also cleaning the unused after.

https://live.paloaltonetworks.com/t5/expedition-migration-tool/ct-p/migration_tool