topic Migrating Palo Alto's in General Topics

Migrating Palo Alto's

TSgtAllebone — Tue, 16 Feb 2021 03:36:42 GMT

Quick question regarding changing model of Palo Alto's. We're moving from a larger model to a smaller. Is there a guide I could use for this? From what I've gathered so far the two firewalls have to be on the same software version? is that the only pre-requisite? After that we can export config and import it on the new hardware? Much appreciated!

Re: Migrating Palo Alto's

MP18 — Tue, 16 Feb 2021 05:34:02 GMT

@TSgtAllebone

If you are moving from Single PA large to small then yes software version has to be same as best practice.

I have done many migrations from small model to higher models with same PAN OS version.

Yes you can import the config to new PA.

Are these PA connected to Panorama?

That reduces the issues during the migration.

Regards

Mahesh

Re: Migrating Palo Alto's

TSgtAllebone — Wed, 24 Feb 2021 00:14:24 GMT

@MP18

We have two 5220's (HA paired) moving to two 3250's and not using Panorama. Would versions that are close still work? ie 8.11 and 8.08 etc. I can understand possible issues if they are completely different versions (v8 and v9). Thank you.

Re: Migrating Palo Alto's

MP18 — Thu, 25 Feb 2021 03:06:04 GMT

@TSgtAllebone

It is better to have same version on both PA.

If for some reason you can not have same version then it should work as you mentioned below.

Regards