Reply
Highlighted
L2 Linker
Posts: 17
Registered: ‎01-09-2019

Fortinet migration

Looking to move addresses, address groups, services and service groups from a FGT1000C to a Palo 3060 and then build the policy in Palo manually.  I've backed up the FGT config and created a new project in Expedition and was able to import it successfully.  The current User Guide is a bit confusing.  I'm new to Palo and was wondering if anyone has done this successfully.

L4 Transporter
Posts: 116
Registered: ‎05-01-2009

Re: Fortinet migration

 

after importing and migrating your fortinet configuration only merge the addresses/service and groups into your base config. Below is a thread on how to merge configurations. 

 

After merging and generatinng the XML you can create the security policies directly on teh Palo alto FW or panorama.

 

https://live.paloaltonetworks.com/t5/Migration-Tool-Discussions-old/Merge-Configurations/td-p/20807

 

L2 Linker
Posts: 17
Registered: ‎01-09-2019

Re: Fortinet migration

The link provided does not detail out how to perform the actual steps but instead provides high level guidance.  It also doesn't mention anything Fortinet.  I am new to Expedition and believe the User Guide needs updating to provide more detail on how to perform migrations.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!