topic Configuration Migration Tool? in General Topics

Configuration Migration Tool?

John_Welby — Wed, 14 Apr 2021 18:25:39 GMT

All,

Is there a tool to migrate the configuration of a 5050 running 8.1.11 to a 5220 running 9.0.x?

Regards,

John

Re: Configuration Migration Tool?

jdelio — Wed, 14 Apr 2021 19:56:34 GMT

The tool that we have formerly known as the "Migration Tool" is now known as Expedition.

We have a bunch of information located there along with its own discussion area here:

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool

I would recommend you check this out and then post there if you are unable to find out what you need. But you should be able to use that tool to do what you are asking.

Re: Configuration Migration Tool?

BPry — Thu, 15 Apr 2021 23:01:14 GMT

@John_Welby,

You can use expedition to do this, or you could simply export the configuration and import it directly on the firewall. Personally I like to use the installation of new hardware as a chance to manually go through and verify that everything in your rulebase is still needed, and cleanup any unused objects that may be handing out. For most people, this is easier to do in Expedition.

Just be mindful that your master password has to match to properly import all of the hashed values like phash and pre-shared keys. You'll also need to be mindful of the interface changes between a PA-5050 and PA-5220. Where the PA-5050 has copper interfaces from ethernet1/1 through ethernet1/12, your PA-5220 is only going to have ethernet1/1 through ethernet1/4.

Re: Configuration Migration Tool?

John_Welby — Fri, 16 Apr 2021 13:32:25 GMT

Thank you!

Re: Configuration Migration Tool?

John_Welby — Thu, 22 Apr 2021 15:54:28 GMT

Will do. Thanks!